User is not a member of the Administrators group but they Can Access anything the Administrators group is assigned to!!

Ouch!
Did a Server migration from Server 2003 to Server 2012 R2. Virtualized the Domain controller and a File Server.
Used Robocopy, icacls and takeown to get the permisions and access to work correctly.
One user we will call here Mary is a member of three groups: HR, HRA and Boardroom but when I give a test file Administrators only access she can breeze right in!
I do not know if this was how it worked before the migration but how do I stop it.
Effective permissions appear correct but she just tra-la-la's right on in!
Any ideas?
Liam

Please do this after you verify all permission settings for all the groups the account is associated with. Also, make sure you check the NTFS folder permissions before doing this as well.
Since the same result happens on multiple computers, it is not the profile.
I am recommending you delete the AD account (or rename to backup the account).
It will not effect the users Exchange account, but you will need to link it back to the new AD user account. 
You can also delete her profile just to remove it, for the "just in case" scenario.
Don't forget to mark the post that solved your issue as "Answered." By marking the Answer you are enabling users with similar issues to find what helped you. Lewis Renwick - IT Professional

Similar Messages

Maybe you are looking for

  • Midisport 2x2 on osx 10.5.8 fails  (but works in Fusion with Vista)

    Windows definitely wins this one. On the same machine, Windows just works. The Mac, not so much. I installed the midisport mac drivers, and after that the lights on the device turned on. So far so good. But: GarageBand shows 0 midi inputs Audio Midi

  • Macbook Pro Retina 2013 Multiple Thunderbolt Monitors

    Anyone know if there is any documentation suggesting that the standard Kernel not support multiple Thunderbolt displays? From what I can tell, the OS does not even detect an additional monitor. This is an issue whether I daisy-chain the monitors or u

  • AS3.0 to MMO?

    Hi there, I'm thinking of making a game on ActionScript 3.0 or 2.0 (still deciding on the easier of the two). I've got some knowledge on ActionScript 2.0, but not so much on 3.0. I'm a quick learner though. Anyhow. I know it's possible to create a Ma

  • Would like to change home page to google

    Each time I attempt to change my home page from bing to google, I'm either told server cannot be found, or it returns to bing.

  • Server can't create my workspace error when trying to distribute a form?

    I am trying to distribute a form using Acrobat.com.  When I enter the email addresses, the program goes to work and then tells me that it can't create a workspace on the server.  Am I missing something in the process? Thank you in advance for any hel