Can't change permissions for local Administrator account on local disk C:
I have a TS 2008, everything I did was through local administrator account. I logged into it today to add a printer driver for a customer and couldn't save it to my user's folder or anywhere on C:
I get error: The following has been disallowed. Please contact the server administrator. Or something along those lines.
I right clicked on C: drive and didn't see Security Tab. So I went to GPEdit and made sure the "Remove Security Tab" is "not configured". After looking in registry under HKLM and HKCU for any policy registry keys, I decided to set "Remove Security Tab" to
"disabled". I had my security tab again. I went and changed the same GPO to "not configured" and security tab was still present.
It this point, I still can't access C: drive.
The permissions on local disk C: are as follows:
Creator Owner - Special
System - Full Control
Administrators Group - Read and Execute (missing the full control, I'm looking for or at least Modify permission which I cannot change)
Users - Special, Read and Execute, Create Folders/Append Data
When I try to Edit Administrators Group or individual users through Edit or Advanced->Edit, I get at first
"An error occurred while applying security information to:
c:\
Acces is denied.
When I press Continue, I get
"Unable to save permission changes on Local Disk (C:).
Access is denied.
Since setting the GP for "Remove Security Tab" to "disabled" then back to "not configured" worked for Security tab, I went through every GPO under User Configuration->Administrative Template->Windows Components->Windows Explorer and did the same
thing for all of them(set to disabled, then back to not configured).
Now I can browse the C: drive and all my folders and create/move/delete files but I still cannot change the permissions for Administrators group in Security tab.
I need some help with this, the local Group Policy has not been configured at all for local accounts which is why this is strange.
Thanks in advance, Viktor.
P.S. I tried running SunInACL tool to add Administrator/System full permissions to all registry values. Still no go.
March 14th, 2012 9:57pm
Hi,
Thank you for the post.
Please take drive C ownership first, then you could set the permission on your disk.
Take Ownership of a File or Folder
Note:
Do Not select the Replace owner on subcontainers and objects check box when you take the ownership.
If the issue recurs after server reboot, please move the server to the new OU without linked GPO.
RegardsRick Tan
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2012 4:36am
Hi,
Thank you for the post.
Please take drive C ownership first, then you could set the permission on your disk.
Take Ownership of a File or Folder
Note:
Do Not select the Replace owner on subcontainers and objects check box when you take the ownership.
If there are more inquiries on this issue, please feel free to let us know.
Regards
Rick Tan
TechNet Community Support
March 15th, 2012 11:31am
Okay, I did that and now I can access permissions and change them.
I restarted that server last night and more issues arose. I cloned another VM server to replace this one because several services failed to start with error "Not enough system resources".
Not sure if this is all related, could be.
I'm going to keep the old server to see if I can figure out anything, most of the articles I read about these errors refer me to a possible virus infection.
What do you think?
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2012 6:37pm
To be more exact:
Com+ Event System
Network List Service
Terminal Services
Background Intelligent Transfer
TPM Base Services
I get a pop-up when trying to start them that "Some services start and stop depending on when they need to be started".
The event viewer gives me following errors:
EventID: 4612 The COM+ Event System ran out of memory during its internal processing, at line 45 of D\longhorn\com\complus\src\events\tier1\eventsytemobj.cpp
EventID: 12 Volume Shadow Copy Service information: The COM Server with LCSID {4e14fba2-2e22-11d1-9964-00-00c04fbbb345} and name CEventSytem cannot be started. Most Likely the server is in the process of shutting down or the system is
out of memory. [0x8007000e]
EventID: 4609 The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80010105 from line 202 of d:\longhorn\com\complus\src\events\tier2\service.cpp
March 15th, 2012 6:54pm
Since I cannot start Server Management Console, it crashes instantly, I cannot look at Performance and Reliability center but Task Manager doesn't show anything using memory/CPU at all.
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2012 6:55pm