Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a few machines that for some reason won't allow the user (domain user, local user, etc.) the access the machine.config file in the v[.NETversion#]/CONFIG folder. I want to modify the machine.config for this machine, but I get access denied when I try to open the file.

I'm guessing it is a local security policy that is requiring the user be at least a local admin to read/modify this file. Any ideas? It's not group policy, because all users are subject to the same GPOs.

Thanks in advance!

share|improve this question
up vote 0 down vote accepted

It's probably just an NTFS ACL. Have you looked at the permissions assigned to the file yet? The only way that "Security Policy" can affect permission to modify files is through modifying NTFS ACLs.

share|improve this answer
I should have specified that. I did look at that, and even set a particular user with full control. I still get access denied with that. The only way to get access to the machine.config is to be a local admin. NTFS permissions tell me I should be granted access, but it gives me access denied still. – Thomas Stringer May 19 '11 at 21:08
@Surfer513: How are you accessing the folder remotely? Thru the "\\computer\c$" share? – Evan Anderson May 20 '11 at 6:31
It's actually a ClickOnce application that is trying to access it. – Thomas Stringer May 27 '11 at 16:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.