Quantcast
Channel: File Services and Storage Forum
Viewing all articles
Browse latest Browse all 1766

Domain Admins unable to view permissions or browse folder

$
0
0

I'm having an issue with Windows server 2008 R2 folder permissions.  I have a number of shares on the server and have configured the permissions as follows:

Share Permissions:

      UserGroup1: Read & Change

     Usergroup2: Read & change

     Domain Admins: Full Control

NTFS Permissions:

     UserGroup1: All but Full Control, Change Permissions and Take Ownership

     UserGruop2:  All But Full Control, Change Permissions and Take Ownership

     Domain Admins: Full Control

     <Localserver>\Administrators: Full Control

I then RDP to the server and log in as a user who is a member of both the local administrator Group and the Domain Admin group, browes to the folder, Right click, go to the security tab and get "To continue, you must be an administrative user with permissions to view this object's security properties.  Do you want to continue" with a continue button.  If I click the button I can see the permissions and appear to be able to make changes.  In addition if I attempt to browes the folder I get "You don't currently have permissions to access this folder.  Click Continue to permanently get access to this folder."  If I click Continue the user I am logged in as is given full control to the folder and all folders and files below.  The only way I can view the properties or browse the folder is to add my user account or give <localserver>\users permissions to the folder.  If I RDP to the server as either <domain>\administrator or <localserver>\administrator I have no problems.


Viewing all articles
Browse latest Browse all 1766

Trending Articles