file permission strangeness

From: frank (somewhere_at_rainbow.net)
Date: 06/07/05 

Date: Tue, 07 Jun 2005 16:28:36 GMT

On a windows 2000/sp4 server I am experiencing the following inexplicable
behavior:

The local Administrators group has the following members: administrator,
xdom\domain admins, xdom\admin, ydom\domain admins.

d:\ (root folder) owner is Administrators, Everyone has full control.
d:\data folder Everyone has full control.

Logged into the server console as administrator, clicking the 'security' tab
on explorer properties for the d:\data folder displays 'You only have
permission to view the current security information on data.' and I cannot
take ownership (although owner is displayed as 'administrators')?!? And I
cannot write files to this folder.

I get the same blockage logged into the console as the local administrator
and domain admin accounts. I tried removing and re-adding the domain admin
account to the local 'administrators' group, but no change. What is causing
this behavior?

-Frank Brown
http://www.inwa.net/~frog/

Relevant Pages

  • Re: Add Domain Admin to local XP Admin group
    ... EAs are already Admins of all domains in the forest. ... local Administrators in a given workstation or in all Workstations. ... wipe out the DA from local Administrators group, by default it's there, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Automating Local Computer Admin Rights
    ... groups the first box that pops up add administrators. ... add domain admins because they are there by deafult and add adminstrators. ... gpo settings will not tricly down or inherit the settings just from a child ... members of the administrators group on the local machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Administrator privs on Client
    ... It is fairly normal to restrict admin access to SQL Server to only ... Domain Admins is added to a machine's Administrators ... I have an SQL server on my domain, I have to login as the local sql ...
    (microsoft.public.windows.group_policy)
  • Re: Weird security problem in my WIn2K domain
    ... Keep in mind that enterprise admins group has no administrative powers on ... Another thing to try is to create a new account ... add that account to the local administrators ... enable auditing of account logon events in Domain Controller Security Policy ...
    (microsoft.public.windows.server.security)
  • Re: Local Logon To Domain Controller
    ... That dose this administrators out to PCs have to do? ... PC Admins or what ever you want. ... >>> Server machine itself. ... >>logon locally on DCs. ...
    (microsoft.public.win2000.active_directory)