Administrators-only drive access with UAC enabled?


i have 2008 server, , have uac enabled.  have drive (e:) members of adminsitrators group have access to, non-adminsitrators not have access to.  in windows 2003 without uac, had removed file/directory inheritable permissions drive @ e:\ level, except adminsitrators, , worked great. 

however, 2008 , uac enabled, appears administrator rights no longer there when browsing, breaks.  when member of the administrators group opens windows explorer view e: drive, pop-up says "e:\ not accessible.  access denied.".  if grant users "list folder" , "read attributes" permissions on  e:\ "this folder only", can access e:\.  however, when a member of administrators group browses a subfolder of e:\, pop-up saying "you don't have permissions access folder.  click continue access folder.", , either fails or adds administrator folder's permissions, creates permissions mess.

i thought putting of our administrators in seperate group, , giving group administrative rights, , giving group rights the e: drive.  recommended way secure drive now, or defeat purpose of uac?  i didn't find published microsoft security recommendation i'm looking suggestions.

thanks!

hi,

 

this behavior occurs because explorer.exe launched standard user access token of administrative account. means administrative permission not included when try access e drive.

 

for more information uac, please refer following article:

 

user account control step-by-step guide

http://technet.microsoft.com/en-us/library/cc709691(ws.10).aspx


this posting provided "as is" no warranties, , confers no rights.


Windows Server  >  Security



Comments

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

Cannot access Anywhere Access using domain name?

WMI Failure: Unable to update Local Resource Group