When adding a group, say Domain Admins to a folder, I still get a prompt that I cannot access the folder with an account that is in the domain admins group. When I explicitly add my user account to the folder, I can get access to the folder. Why can't I just use the AD group?

Hi, This is caused that all accounts in Windows Vista/7/2008/2008R2 are actually work as standard accounts. Though an account is in Administrators group, we will still need to Run As Administrator when UAC is enabled. When you add the account to security tab, it means you give permission to a standard account so it can help bypass UAC. A workaround is to create a group and add the administrator accounts to the group, add the group to folders which need to share to administrators to bypass the UAC prompt.Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com