You don't currently have permission to access this folder

Question

_{Wednesday, April 27, 2016 11:17 AM}

I get this message trying to open a share from Computer Management, on the local file server

What seems strange to me, is that i get this message:

The thing is that the local Administrators group on the file server, has a domain group X as a member, and I am a member of group X with the domain admin account I am logged on the server with.

The shares I try to access when I get the Warning, do NOT have the group X added with permissions in the Security tab

If the group X has been given Full control or Modify permissions explicitly on other shares (in the Security tab), I can access those shares without the Warning

Why is this? I am Administrator on this server because of group X, so I don't get it...

Freddy

All replies (4)

_{Thursday, April 28, 2016 1:07 AM ✅Answered}

Hi Freddy,

Thanks for your reply.

UAC creates a split Access Token.  Users in Local Administrators group will work as standard user.  So if only Administartors group has permission on a folder, user is the group will not have permission to access it as it works like a standard account which do not have permission on the folder.  Once we select continue for the prompt, the permissions for the User(Even if they are a member of Administrator's group) are added explicitly.

If the prompt is not required then we need to turn off UAC but it is not recommend. And you could add the account directly to the security properties with explicit permission.

Best Regards,

Mary Dong

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, April 27, 2016 12:10 PM}

Hi Freddy,

Thanks for your post.

It still seems like a UAC related issue.

Please disable UAC and access the same folder as a test. This is just a test and you can enable it after testing.

If you can access the folder with UAC disabled, create a new group and add accounts to the group, give it the same permission to workaround this issue.

As we know, users in Local Administrators group will work as standard user. When it needs to run as Admin, a prompt will occur to promote the permission to Admin level. So if only Administartors group has permission on a folder, user is the group will not have permission to access it as it works like a standard account which do not have permission on the folder.

https://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx

Best Regards,

Mary Dong

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, April 27, 2016 12:19 PM}

I see in User Account Control Settings that the current setting is Never Notify

I have to add this info aswell:

When I click Continue, my admin account is added to the Security permissions with Full Access, set to "This folder, subfolder and files"

Freddy

_{Saturday, July 4, 2020 12:46 AM}

Under certain constrained circumstances, disabling User Account Control (UAC) on Windows Server can be an acceptable and recommended practice. These circumstances occur only when all the following conditions are true:

• Only administrators are allowed to log on to the Windows-based server interactively at the console or by using Remote Desktop Services.
• Administrators log on to the Windows-based server only to perform legitimate system administrative functions on the server. 

https://support.microsoft.com/en-us/help/2526083/disabling-user-account-control-uac-on-windows-server

​