Can't access shared files as Domain Admin

[Guest Neil]

I have a Windows 2003 Server (non-domain controller) that is acting funny.

It doesn't seem to be able to access any of the files on remote shares in the

same domain even though I am logged in as the Domain Admin. I can browse the

directories and copy the files in them to other places with no problem but I

can't actually run anything.

 

However, when I go to copy something it asks me "Do you want to move or copy

files from this zone?", making me think I set up DNS incorrectly. When I

check DNS on this server the Forward and Reverse lookup zones look identical

to those on the primary DNS server and there aren't any errors in the Event

Viewer, so I'm not sure where I've gone wrong. Workstations using this

server as their only DNS server are still able to access the internet and the

local domain without any issues.

 

For example, I was trying to patch our accounting software, so I tried to

run the patch file directly from the share while logged in as the Domain

Admin on the local workstation. I have double-checked the security

permissions and verified that Domain Admins have full control of this

directory, as well as Full Control on the root drive this directory resides

in. However I get an error saying I don't have the appropriate permissions

to run this file. It does the same thing when I copy the file to the local

computer and try to run it.

 

I can still access these files from any other machine (mostly XP Pro

workstations) using the same Domain Admin account, so it seems to be some

setting related to this particular 2003 Server. The 2003 Server is a member

server in the domain and its only domain-related function right now is acting

as a secondary DNS server. Any ideas?

[Guest Saral6978]

Re: Can't access shared files as Domain Admin

 

Neil,

 

This sort of sounds like what I ran into when trying to launch exe files

on my newly built server running Win2003R2 from a share. You have to go

into IE and add the server you are trying to execute from as a trusted site.

So, for example, if the servername that has the file share is \\fileserver\share,

just go into your Win2003 server's IE and add \\fileserver in Trusted Sites.

This will allow you to launch them directly from the network share.

 

You'll also notice that if you copy the exe from that share directly to the

server, you still won't be able to execute it until you right-click on the

exe file and select "unblock" from the General tab.

 

Hopefully this is the issue that you are having. I think it is some built-in

security feature of Win2003R2, cuz that is when it started happening to me.

 

Thanks,

 

Sara

> I have a Windows 2003 Server (non-domain controller) that is acting

> funny. It doesn't seem to be able to access any of the files on

> remote shares in the same domain even though I am logged in as the

> Domain Admin. I can browse the directories and copy the files in them

> to other places with no problem but I can't actually run anything.

>

> However, when I go to copy something it asks me "Do you want to move

> or copy files from this zone?", making me think I set up DNS

> incorrectly. When I check DNS on this server the Forward and Reverse

> lookup zones look identical to those on the primary DNS server and

> there aren't any errors in the Event Viewer, so I'm not sure where

> I've gone wrong. Workstations using this server as their only DNS

> server are still able to access the internet and the local domain

> without any issues.

>

> For example, I was trying to patch our accounting software, so I tried

> to run the patch file directly from the share while logged in as the

> Domain Admin on the local workstation. I have double-checked the

> security permissions and verified that Domain Admins have full control

> of this directory, as well as Full Control on the root drive this

> directory resides in. However I get an error saying I don't have the

> appropriate permissions to run this file. It does the same thing when

> I copy the file to the local computer and try to run it.

>

> I can still access these files from any other machine (mostly XP Pro

> workstations) using the same Domain Admin account, so it seems to be

> some setting related to this particular 2003 Server. The 2003 Server

> is a member server in the domain and its only domain-related function

> right now is acting as a secondary DNS server. Any ideas?

>

[Guest Neil]

Re: Can't access shared files as Domain Admin

 

Great, that did the trick. I didn't know that IE's trusted sites would

affect Windows Explorer. Thanks so much!

 

"Saral6978" wrote:

> Neil,

>

> This sort of sounds like what I ran into when trying to launch exe files

> on my newly built server running Win2003R2 from a share. You have to go

> into IE and add the server you are trying to execute from as a trusted site.

> So, for example, if the servername that has the file share is \\fileserver\share,

> just go into your Win2003 server's IE and add \\fileserver in Trusted Sites.

> This will allow you to launch them directly from the network share.

>

> You'll also notice that if you copy the exe from that share directly to the

> server, you still won't be able to execute it until you right-click on the

> exe file and select "unblock" from the General tab.

>

> Hopefully this is the issue that you are having. I think it is some built-in

> security feature of Win2003R2, cuz that is when it started happening to me.

>

> Thanks,

>

> Sara

>

> > I have a Windows 2003 Server (non-domain controller) that is acting

> > funny. It doesn't seem to be able to access any of the files on

> > remote shares in the same domain even though I am logged in as the

> > Domain Admin. I can browse the directories and copy the files in them

> > to other places with no problem but I can't actually run anything.

> >

> > However, when I go to copy something it asks me "Do you want to move

> > or copy files from this zone?", making me think I set up DNS

> > incorrectly. When I check DNS on this server the Forward and Reverse

> > lookup zones look identical to those on the primary DNS server and

> > there aren't any errors in the Event Viewer, so I'm not sure where

> > I've gone wrong. Workstations using this server as their only DNS

> > server are still able to access the internet and the local domain

> > without any issues.

> >

> > For example, I was trying to patch our accounting software, so I tried

> > to run the patch file directly from the share while logged in as the

> > Domain Admin on the local workstation. I have double-checked the

> > security permissions and verified that Domain Admins have full control

> > of this directory, as well as Full Control on the root drive this

> > directory resides in. However I get an error saying I don't have the

> > appropriate permissions to run this file. It does the same thing when

> > I copy the file to the local computer and try to run it.

> >

> > I can still access these files from any other machine (mostly XP Pro

> > workstations) using the same Domain Admin account, so it seems to be

> > some setting related to this particular 2003 Server. The 2003 Server

> > is a member server in the domain and its only domain-related function

> > right now is acting as a secondary DNS server. Any ideas?

> >

>

>

>