Background info: The admin account of a key user needs unrestricted access to a folder on a server.
-> he is working on the server per RDP or directly with the folder (shared)
Said admin account is in a domain security group called xyz, I have added group xyz to the local administrator group on the server.
However it seems to behave differently if I add xyz to the NTFS permissions(full control) or the local administrator with xyz inside (full control).
What they need is the behaviour of xyz added seperately, but why does this behave differently at all?
This behaviour seemed different on windows server 2012R2 where it didn't made any difference as far as I remember.