Re: "access denied" for members of Administrators, stand-alone server



Users group often includes Authenticated Users (which means any user
or computer account that authenticated to gain a login type session) as
Al inidcated, and also often includes INTERACTIVE (which means
any account login session based on the local login user right).
So the account may have been indirectly a member of Administrators.
When you added a grant on the directory for Administrators Full Contol,
if the deny for Users was still in effect (you said you blocked inheritance)
then the explict grant added would have overridden the inherited deny
for Administrators members.

Roger

"Larry" <nobody@xxxxxxxx> wrote in message
news:137lu2cd1vtvt78@xxxxxxxxxxxxxxxxxxxxx
I got this working: 1) uncheck "Allow inheritable permissions from parent
to propagate to this object." under Advanced and choosing to remove all
permissions from that directory structure, 2) Add Full Control to
Administrators.

But I am still mystified as to why the first approach did not work...

Larry



.



Relevant Pages

  • Re: Password Problem - Server
    ... First off I would try that administrators account to confirm it is enbled ... and able to login into the domain. ... Domain Administrators for the log on locally policy. ... We periodically reboot our server and had ...
    (microsoft.public.windows.server.sbs)
  • Re: Workgroup with inconsistent password requirements
    ... users will need to authenticate to a user account on the XP Pro computer to ... Also be default XP Pro requires that the user account has a password to ... > Name OS Login Acct Other Accts Shares ... > All accounts are members of Administrators. ...
    (microsoft.public.windowsxp.security_admin)
  • HELP - no sa password "about to reinstall sql7"
    ... administrators will be sysadmins in SQL Server ... > login but you should refer to the following for more ... >>to access a database as the SQL 'sa' account. ...
    (microsoft.public.sqlserver.security)
  • Re: permission problem?
    ... The windows account that Agent uses need to be able to login to SQL Server. ... You removed the Administrators account from SQL Server, and couldn't login, ...
    (microsoft.public.sqlserver.server)
  • Weakness introduced by denying remote logins on AIX, possibly others
    ... AIX 4.3.3 and AIX 5.1, ... is possible to remotely enumerate the passwords of a known AIX account. ... believed to be in the response from the login program after authentication ... Give accounts that have been restricted from remote logins strong passwords. ...
    (Security-Basics)

Quantcast