Guest Neil Posted March 13, 2008 Posted March 13, 2008 I have a Windows 2003 Server (non-domain controller) that is acting funny. It doesn't seem to be able to access any of the files on remote shares in the same domain even though I am logged in as the Domain Admin. I can browse the directories and copy the files in them to other places with no problem but I can't actually run anything. However, when I go to copy something it asks me "Do you want to move or copy files from this zone?", making me think I set up DNS incorrectly. When I check DNS on this server the Forward and Reverse lookup zones look identical to those on the primary DNS server and there aren't any errors in the Event Viewer, so I'm not sure where I've gone wrong. Workstations using this server as their only DNS server are still able to access the internet and the local domain without any issues. For example, I was trying to patch our accounting software, so I tried to run the patch file directly from the share while logged in as the Domain Admin on the local workstation. I have double-checked the security permissions and verified that Domain Admins have full control of this directory, as well as Full Control on the root drive this directory resides in. However I get an error saying I don't have the appropriate permissions to run this file. It does the same thing when I copy the file to the local computer and try to run it. I can still access these files from any other machine (mostly XP Pro workstations) using the same Domain Admin account, so it seems to be some setting related to this particular 2003 Server. The 2003 Server is a member server in the domain and its only domain-related function right now is acting as a secondary DNS server. Any ideas?
Guest Saral6978 Posted March 13, 2008 Posted March 13, 2008 Re: Can't access shared files as Domain Admin Neil, This sort of sounds like what I ran into when trying to launch exe files on my newly built server running Win2003R2 from a share. You have to go into IE and add the server you are trying to execute from as a trusted site. So, for example, if the servername that has the file share is \\fileserver\share, just go into your Win2003 server's IE and add \\fileserver in Trusted Sites. This will allow you to launch them directly from the network share. You'll also notice that if you copy the exe from that share directly to the server, you still won't be able to execute it until you right-click on the exe file and select "unblock" from the General tab. Hopefully this is the issue that you are having. I think it is some built-in security feature of Win2003R2, cuz that is when it started happening to me. Thanks, Sara > I have a Windows 2003 Server (non-domain controller) that is acting > funny. It doesn't seem to be able to access any of the files on > remote shares in the same domain even though I am logged in as the > Domain Admin. I can browse the directories and copy the files in them > to other places with no problem but I can't actually run anything. > > However, when I go to copy something it asks me "Do you want to move > or copy files from this zone?", making me think I set up DNS > incorrectly. When I check DNS on this server the Forward and Reverse > lookup zones look identical to those on the primary DNS server and > there aren't any errors in the Event Viewer, so I'm not sure where > I've gone wrong. Workstations using this server as their only DNS > server are still able to access the internet and the local domain > without any issues. > > For example, I was trying to patch our accounting software, so I tried > to run the patch file directly from the share while logged in as the > Domain Admin on the local workstation. I have double-checked the > security permissions and verified that Domain Admins have full control > of this directory, as well as Full Control on the root drive this > directory resides in. However I get an error saying I don't have the > appropriate permissions to run this file. It does the same thing when > I copy the file to the local computer and try to run it. > > I can still access these files from any other machine (mostly XP Pro > workstations) using the same Domain Admin account, so it seems to be > some setting related to this particular 2003 Server. The 2003 Server > is a member server in the domain and its only domain-related function > right now is acting as a secondary DNS server. Any ideas? >
Guest Neil Posted March 17, 2008 Posted March 17, 2008 Re: Can't access shared files as Domain Admin Great, that did the trick. I didn't know that IE's trusted sites would affect Windows Explorer. Thanks so much! "Saral6978" wrote: > Neil, > > This sort of sounds like what I ran into when trying to launch exe files > on my newly built server running Win2003R2 from a share. You have to go > into IE and add the server you are trying to execute from as a trusted site. > So, for example, if the servername that has the file share is \\fileserver\share, > just go into your Win2003 server's IE and add \\fileserver in Trusted Sites. > This will allow you to launch them directly from the network share. > > You'll also notice that if you copy the exe from that share directly to the > server, you still won't be able to execute it until you right-click on the > exe file and select "unblock" from the General tab. > > Hopefully this is the issue that you are having. I think it is some built-in > security feature of Win2003R2, cuz that is when it started happening to me. > > Thanks, > > Sara > > > I have a Windows 2003 Server (non-domain controller) that is acting > > funny. It doesn't seem to be able to access any of the files on > > remote shares in the same domain even though I am logged in as the > > Domain Admin. I can browse the directories and copy the files in them > > to other places with no problem but I can't actually run anything. > > > > However, when I go to copy something it asks me "Do you want to move > > or copy files from this zone?", making me think I set up DNS > > incorrectly. When I check DNS on this server the Forward and Reverse > > lookup zones look identical to those on the primary DNS server and > > there aren't any errors in the Event Viewer, so I'm not sure where > > I've gone wrong. Workstations using this server as their only DNS > > server are still able to access the internet and the local domain > > without any issues. > > > > For example, I was trying to patch our accounting software, so I tried > > to run the patch file directly from the share while logged in as the > > Domain Admin on the local workstation. I have double-checked the > > security permissions and verified that Domain Admins have full control > > of this directory, as well as Full Control on the root drive this > > directory resides in. However I get an error saying I don't have the > > appropriate permissions to run this file. It does the same thing when > > I copy the file to the local computer and try to run it. > > > > I can still access these files from any other machine (mostly XP Pro > > workstations) using the same Domain Admin account, so it seems to be > > some setting related to this particular 2003 Server. The 2003 Server > > is a member server in the domain and its only domain-related function > > right now is acting as a secondary DNS server. Any ideas? > > > > >
Recommended Posts