mcdsweet98 Posted July 11, 2011 Posted July 11, 2011 Hi Guys, I am having this issue with UAC on a windows server 2008 workgroup servers. I am trying to access administrative shares on this workgroup machines but it won't allow me although I am already in an admin group. I know this is caused by UAC since the administrator built-in ID works.I have this following questions needed for help 1) How come UAC blocks workgroup servers but not those joined domain? Even if our DC is Windows Server 2008, should the UAC be blocking those Windows 2008 servers parked under this Domain Controller? Apparently Windows 2008 domain servers are working fine accessing the administrative shares. 2) By default, when Microsoft commissions a windows server 2008 server, is the administrative shares blocked by default? and only administrator built in ID is able to access it? 3) Any workaround to go into the administrative shares for this workgroup servers using any other local IDs in the administrator group without disabling UAC or tweaking the Registry policy Token? Any other alternatives? Please help. Thank you Quote
ICTCity Posted July 11, 2011 Posted July 11, 2011 If you are on DOMAIN ADMINS group, you are an admin at DOMAIN LEVEL, not at workgroup level. If must specify the user which can access the share. Quote -------------------------------------------------------- Tu peux aussi crire en franais. Du kannst auch auf Deutsch schreiben. Puoi scrivere anche in italiano. --------------------------------------------------------
mcdsweet98 Posted July 11, 2011 Author Posted July 11, 2011 Hi there. Yes the ID is in Domain ADmin group. Is that why I am able to access the administratve shares? Because the ID is in Domain Admin? But should the UAC on the DC be controlling the Domain Admin ID as well? The problem is happening only when I am accessing the administrative shares of a workgroup server using an administrator ID. However Built in Administrator ID works. Any advice? Quote
ICTCity Posted July 11, 2011 Posted July 11, 2011 Yes, it is correct. You must add the account(s) to the LOCAL ADMINISTRATORS GROUP (on the server side, where you can access shares only with Administrator's account). Quote -------------------------------------------------------- Tu peux aussi crire en franais. Du kannst auch auf Deutsch schreiben. Puoi scrivere anche in italiano. --------------------------------------------------------
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.