I'm new to windows 2008 server permission on folder etc and having few questions. First, my user name is member of administrator group/domain admin etc. i have a folder called prod which contains two folders public and private. When I right click on prod folder and under properties, for security, domain user group has readonly access and administrators group has full access. in public folder under prod, security shows following group has read/write access acct user acct admin administrators On private folder, when i right click and go to security tabl, it shows the message "To continue, your must be an administrative user with permission to view this objects security properties, do you want to continue?", my question is why it comes with that message, when i click continue, another dialog box comes, "Windows needs permission to continue", and on click of continue it shows me permission and following group has the permissions acct admin - read/write administrators - full control Now, if i close the property windows of private folder, and click on private folder to see files under it, it comes with a message "you don't currently have permission to acces this folder", click continue to get access to this folder? if i click continue, another dialog, "windows need permission to continue, edit security," continue and cancel button, on click of continue shows me the folder. but when i go back the properties of the private folder, under security, i see my user name is added in the list and it doesn't comes with message to show security permssions. i'm not sure why it is and why private folder doesn't work the same as public folder when i'm memeber of administrators group. please help. thanks, P

Hello, what you see belongs to UAC(User account control), even enterprise, domain and members of the administrators security group belong to it. Also the Administrator account is limited for some tasks. This is the new security concept starting within Windows server 2008. So either disable UAC, not recommended, or configure GPO settings to give your admins some more "freedom".Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Could you guide me what I need to change GPO and how i can do it? Thanks, Pmark it as answer if it answered your question :)

Hi, Please refer to the following Microsoft TechNet articles that will help you understanding UAC and related Group Policy settings. How do I change the behavior of User Account Control by using Group Policy? http://technet.microsoft.com/en-us/library/dd851527.aspx User Account Control Step-by-Step Guide http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

And this is what i did in group policy for UAC User Account Control : Behaviour of the elevation prompt for administrators in Admin approval mode, i changed this value to elevate without prompting but i still have the challengs as i mentioned in start of my post. do i need to change some other settings?mark it as answer if it answered your question :)

Hi, Please try to disable UAC on the Windows Server 2008 to check the result. For the detailed steps, please refer to the following Microsoft TechNet article: How do I change the behavior of User Account Control by using the slider? http://technet.microsoft.com/en-us/library/dd759070.aspx Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.