We remove domain\users permissions from the root of all of our drives because we don’t want users accessing adminsitrative share via UNC path in our environment. By default, when you join server 2008 to the domain it adds domain admins to the local administrators group of the server. However, I have a user called “jobs” that we use to run services on the server. This user is a member of the domain admins group. Realistically any user who is a member of local administrators group should have full control of all drives on the system. This user does not have any access. I’ve checked the NTFS perms and servername\administrators have full control. So if you follow the hierarchy, “jobs” is a member of domain admins who is a member of local administrators who has full control over all NTFS perms on the server. Why do I get access denied when trying to access the drive as “jobs”, but I have the ability as “jobs” to add itself full control permissions to the drives? Sorry if this question doesn’t make sense, but the results don’t make sense either.
Thanks!!
