question

MarcoMilone-6587 avatar image
0 Votes"
MarcoMilone-6587 asked FanFan-MSFT commented

Access on Folder require user permissions

Hi, i have a problem with access on Folder on my File Server 2012 R2

Scenario:
- UserA is a member of "Domain Admins" group
- "Domain Admins" is a member of "SERVER\Administrators" group

78748-image.png

  • The ACL of the folder grant FULL permission of "Server\Administrators" grop as follow


78597-image.png


  • Trying to access the folder , Explorer prompt the message "You don't currently have permission to access this folder."

78739-image.png


How can solve? I also disabled the UAC but nothings changed.


windows-server
image.png (19.1 KiB)
image.png (28.1 KiB)
image.png (14.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MotoX80 avatar image
0 Votes"
MotoX80 answered

Is the user trying to access the local drive path, F:\Shares\FAC, or through a network share like \\ServerName\FAC?

If it's the network share, be sure to check the share permissions.

Use the effective access tab to analyze the user in question's permissions to verify access.

78908-capture.jpg


78909-capture1.jpg



capture.jpg (70.1 KiB)
capture1.jpg (83.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,

Since you delegated the permission only for the NTFS permission, the users will be able to access the folder when access the file locally.
As MotoX80 mentioned above, If you access the folder by a network path like:\\servername\shared folder ,we also need to share the folder and assign the share permissions to the user.

Best Regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarcoMilone-6587 avatar image
0 Votes"
MarcoMilone-6587 answered

Hi, as a attached screenshot you can see that the permissions is everyone for Share lever and custom for ntfs level.
My user is in domain admins group and I have a "effective access" but to access on folder i must click on UAC warning message

80127-2021-03-19-09h55-44.png


80145-2021-03-19-09h38-56.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarcoMilone-6587 avatar image
0 Votes"
MarcoMilone-6587 answered FanFan-MSFT commented

I found the solution:

https://social.technet.microsoft.com/Forums/en-US/fedbb110-556d-4d2f-83bb-fb679c125cc3/windows-server-2012-uac-folder-problem?forum=winserverfiles

"You want to add this DWORD LocalAccountTokenFilterPolicy to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System with the value of 1."

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Good to hear that you have solved this issue by yourself. In addition, thanks for sharing your solution in the forum as it would be helpful to anyone who encounters similar issues.
If there is anything else we can do for you, please feel free to post here!

Best Regards,

0 Votes 0 ·