Granting an admin write permissions on admin shares through GPO

Question

Hello,
I am currently faced with the challenge of domain admins not being able to write to a folder on the C: drive through admin share. We have an application that requires write permissions on the Windows folder in C: but each time the admin account assigned
for this task tries to write to the Windows folder, an access denied error pops up or the "you do not have permission" error.
Please note that the domain admin is a member of the local admins on all machines in the network too but still fails to write on the specified folder and generally drive C:
How can I grant this domain admin account to have the write permissions please. Anyone?
Thanks

Answer 1

Hi,
If a user account belong to local Administrators account, when only Administrators group has permission on a folder, all admins except Administrator account will not have permission to access it.
This is because all accounts in local Administrators group are working as standard accounts. When an Administrator action need to be performed, a prompt will occurs for permission to promote to admin permission. As only Administartors group has permission on
a folder and the account we are using is working like a standard account, we will be denied from accessing.
A workaround is to create a new group for all admins and give the group enough permission for accessing the target folder.
Or you could run all accounts in Administartors group in Admin mode. See this article:
UAC Group Policy Settings and Registry Key Settings
http://technet.microsoft.com/en-us/library/dd835564(WS.10).aspx
If you have any feedback on our support, please send to [email protected]