"access denied" for members of Administrators, stand-alone server

Hello,

I have a stand-alone Windows Server 2003 server where I get a access denied
even for members of Administrators on a folder the moment I deny "Users"
access to it. This is from the server itself - not via a share.

The directory is c:\data\paydir. The c:\data directory is shared and
"Users" have access to it. For paydir, I deny all access to "Users," but
not for "Administrators." I have a user Larry that is a member of
"Administrators" only (I removed him from Users), but even he gets "access
denied" to that directory.

More info:
C:\data>cacls paydir
C:\data\PAYDIR BUILTIN\Users:(OI)(CI)N
BUILTIN\Administrators:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
BUILTIN\Users:(OI)(CI)R
BUILTIN\Users:(CI)(special access:)
FILE_APPEND_DATA

BUILTIN\Users:(CI)(special access:)
FILE_WRITE_DATA


When I view group membership for Larry, only Administrators come up. Is
there an implied membership to Builtin\Users that causes this "access
denied" or what am I missing? All I am trying to accomplish is that only
members of Administrators have access to c:\data\paydir.

Thanks,
Larry


.

Relevant Pages

  • Re: I CALL BULL SHIT ON MIKE PAYNES "UPA Members Call to Action" artical.....
    ... The stategy should be to get general info from a larger ... members giving feedback no one knows ANYTHING about what the majority ... upa administrators just fine. ... dosent it seem odd to you that upa administrators have never seen fit ...
    (rec.sport.disc)
  • Re: [Full-Disclosure] UTTER HORSESHIT: [was January 15 is Personal Firewall Day, help the cause]
    ... > ever heard for not using security products. ... Many of the people on here care nothing about security, ... >> If Annie's weren't members of Administrators, ... >> Administrators would not have access to apps like IE and OE, ...
    (Full-Disclosure)
  • Re: Help needed setting up roaming administrator
    ... >Administrators group (just type in Administrators, don't browse for it, ... >add your Roaming Local Admins group to the Members of this group section ... GPO associated with the OU that contains the computers I want to use ... restricted group and to define the groups the restricted group will ...
    (microsoft.public.win2000.security)
  • Re: Domain Users to have Local Admin rights
    ... members inside the Restricted Group, but it still doesn't wanna work. ... all machines that are with scope of the GPO carrying the Restricted ... their local Administrators group. ... group you define a Restricted Group definition, ...
    (microsoft.public.windows.server.security)
  • Re: Group permissions
    ... Only administrators group members on the sharing-out machine ... can access its administrative shares. ... with the share-level permissions set appropriately and with the ... Members of new global security group cannot remote desktop in to any ...
    (microsoft.public.windows.server.active_directory)
Quantcast