I'm using Windows Server 2008 and I keep having a problem accessing various folders. I'm a Domain Admin and Domain Admins is a member of the local Administrators group. The local Administrators group has full control of the folders I'm trying to access. When I double click on the folder, a prompt comes up saying "You don't currently have permission to access this folder. Click Continue to get access to this folder." If I click continue then view the permissions I see that my specific user account is granted read access to the folder. What's going on here? I have access to the folder through the Administrators group. Shouldn't UAC prompt me to elevate my permissions so that I can access the folder? This seems like a design flaw to me. (I canput upwith UAC prompting me to elevate my permissions, but having to re-write a ton of permissions on my systems seems like a real mess to me). Anyone know if there's a way around this problem? (And I'm not willing to always log in as "Administrator") -Alex

Hello Alex, This typically happens when you attempt to access the files and folders that are created by another operating system such as former Windows XP. Have a try of the following method (take the ownership of the folder): 1. Right the folder that has this issue--->Properties--->Security--->Advanced--->Owner. 2. Verify the ownership of the folder. If the folder owner is not the current domain Administrators group, click Edit--->Other users and groups to grant Administrators group the ownership. 3. Choose the Administrators group with the option 'Replace owner on subcontainers and objects' and click OK. Then check how it works. Hope it will help.

I don't think this answers the question. For a member server on the domain, the Domain Admins are a member of the local administrators group. The local administrators has full control and ownership of the folder. If you log in as a Domain Admin, then you still don't have access to the folder. This is apparently due to Local User Access limitations which creates a LOT of issues with existing permission structures. So how do we get around this LUA? Is there a group policy we can set on the domain to have a domain admin act really like a domain admin which has been the case in the past?

Completely disabling UAC in the User Control Panel (and rebooting) should resolve this. I've been pulling my hair out over this and have finally gotten it resolved.

Thanks for the tip. I turned off the UAC and now it is working as I want it to. Too bad that you have to completely disable this feature/hassle. It seems like even with UAC in place that it shoudl follow permissions outlined by the ACL!! It isn't worth fighting...just turn it off. Rob

I am currently having the same problem.Except I turned UAC off when I built the server out. All of my servers are part of a domainand I use the domain Administrator to do anything I need to the server. I have verified that Domain Admins is part of the local administrators group. Any suggestions on how to fix this?