I used Robocopy /copyall to copy a large hierarchy of folders (and permissions) to a member server from a domain controller. These folders ended up with 'local admin' group having full permissions (as well as they copied permissions). This is great. The problem is that I have a standard domain account that can't access the files even though it is listed in the 'local admin' group on the member server. When clicking on folder in explorer, it says that account doesn't have permission and to 'continue' to give permanent permission to the account. When doing this it gives specific user full permissions in addition to group that it is already listed in. I don't want to keep adding permissions since it is already a member of 'local admins' group. Any ideas?Joseph Kejr

I just tested another standard domain user. I added it to local admin group on the member server and it still cannot see files/folders that both the local administrator and domain administrator can see. All of them are in the 'local admin' group that has full permissions.Joseph Kejr

Hi Joseph, It seems that this is a common issue which related to UAC if the new file server is Windows 2008 (and 2008 R2). Start from Windows Vista/2008, all users in local admin (Administrators) group are actually work as standard users except Administrator account. Thus if permission only applied to Administrators group, users will still not have permission to access the files though they are administrator, with UAC enabled. A workaround is to create a new group and join administrators to the group and add the group to permission list. Or add the specific users/user groups to the list as you mentioned.Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com