Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Recently started at a company and I'm trying to perform one of my first admin tasks... Creating a group policy to map a drive for a remote office. I've got the group policy configured but when I go to move my script file from the desktop to the location in Sysvol where it's supposed to go I get an access denied error.

This is a production AD server and I don't really want to go about making changes that are going to bring down AD. Any idea why this would be happening? My account is in the Domain Admins group which is in the Administrators group which has full access to this share.

share|improve this question
Check the filesystem permissions in addition to the share permissions. What happens when you try to make a change to files there when you're locally logged in to a domain controller, not using the share? – Shane Madden Jun 2 '11 at 18:45
They're fine on the server itself. I can create/edit files no problem. The problem is definitely on the sysvol share. – natediggs Jun 2 '11 at 18:52
Yeah, so I'm not even sure how to fix this issue. The only account with full access to the Sysvol share is the local system account. Since this is a domain controller there isn't a way to use the Local System credentials to update the permissions on the sysvol share. I have no idea how this happened. – natediggs Jun 2 '11 at 19:05

You should be a member of Domain admins, and Group policy creator owners group in Active Directory.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.