Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Im not very skilled when it comes to Windows administration, so bear with me here. I am RDPing to a remote Windows Server 2008, my account is a member of the "Administrators" group, yet I cannot write to any folder. Oddly, I can changes the permissions and explicitly give my user permissions to read/write, then I can perform the write actions.

Should I not have these permissions as default as I am a member of the Admin group?

Cheers,
Chris

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

Be more specific when you say "Any folder". Obviously, you're writing to "C:\Users" or you wouldn't be able to have a profile and logon. What folder are you talking about? It sounds like you're having a "User Account Control" moment to me.

Edit:

Very good. Sorry to nitpick, but it's helpful to know the specific problem you're having.

Welcome to "User Account Control". The "C:\inetpub" folder is protected by default. You have a few choices:

  • Work with the files from an elevated process-- either from an elevated command-prompt, or an elevated instance of Windows Explorer. - Advantage: Seamless access to files and folders, no UAC prompts. Disadvantage: Rather a pain to start, UAC functionality lost and potential security risk.

  • Explicitly grant your user account access to the files. Disadvantage: You have to do it. UAC effectively disabled for that directory (potentially slight security risk, since a program you might run could modify c:\inetpub... files w/o asking for your consent).

  • Disable UAC. - Disadvantage: Potential security risk. You're back to running as an "Administrator" and any program you run can "own" the entire machine.

The "Advantage" to all of the above is seamless access to files and folders with no UAC prompts.

share|improve this answer
    
Ok, yeah so I can write to my C:\Users account. I am having issues with adding/amending files to C:\inetpub unless I explicitly give rights to the files. I have given myself rights to inetpub but if any new folders are uploaded I am unable to edit the files without giving explicit permissions again. –  Owen Jul 13 '09 at 12:15
    
Without been too lazy, do you think you could give me brief disadvantages to each approach (forgetting explicitly granting access) ? –  Owen Jul 13 '09 at 12:51
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.