As administrator, I cannot edit certain files unless I add read/write/etc. for the Users group.

Question

I'm administering a Subversion server running on Windows Server 2008 R2.  When I need to add access to SVN repositories, I need to edit a svnaccess.txt file.  This file sits under C:\Program Files(x86)\CollabNet\Subversion Server.  When I
attempt to edit the file, though, I cannot save it unless I save it to a new file.
My account is part of the local administrators group.  All of the folders and subfolders in the path have Full Control enabled for Administrators.  The file itself also has Full Control enabled for Administrators.  Yet, the only way I can
edit this file is to add Modify and Write permissions to the local Users group even though my account is only part of the local administrators group.
What's odd too, is that if I can edit these permissions I must have the appropriate administrator privileges.
I searched for this a while back and recall seeing a hotfix for this as it was a known bug in Windows Server 2008, however, I cannot for the life of me find this link anymore nor do I see a fix like this on the hotfix spreadsheet.  I need to locate
the hotfix that corrects this to provide to our system admins.  For some reason, they will only install hotfixes if a problem is identified.
If anyone knows of the hotfix that corrects this issue, please let me know! :)
Thank you!

Answer 1

Hi,
As you said, if a user account belong to local Administrators account, when only Administrators group has permission on a folder, all admins except Administrator account will not have permission to access it.
This is caused by UAC. All accounts in local Administrators group are actually working as standard accounts. When an Administrator action need to be performed, a prompt will occurs for permission to promote to admin permission. As only Administartors group
has permission on a folder and the account we are using is working like a standard account, we will be denied from accessing.
A workaround is to create a new group for all admins and give the group enough permission for accessing the target folder.
Or you could run all accounts in Administartors group in Admin mode. See this article:
UAC Group Policy Settings and Registry Key Settings
http://technet.microsoft.com/en-us/library/dd835564(WS.10).aspx
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]