HELP: New 2012 server does not let me add my domain admin account to folder security

[edutech4schools]

Recently installed a new 2012r2 server and all was OK until today when I tried to run the sims update (Solus 2). Apparently the fix is simply to changing the location of where sims is pointing in the c:\windows\sims.ini file from a shared drive to the real location ie from S share to D\Sims......

 

When I tried to edit the Sims.ini file it says I do not have permission to change this file.

 

I am logged on to this new data & sql server using my domain admin account.

 

If I look at the old server security for the C drive it has domain/administrators if I try to add this or just my domain admin account to the new server I get a permission error for program files, program files (x86) and Windows folder, basically I am not able to add a domain admin account to these folders and can not edit the Sims.ini file which is in the Windows folder.

 

This all seems very odd as it was my domain admin account that was used to install all the software on this server in the first place.

 

Hope someone can help asap.

[bossman]

@edutech4schools

 

This may help:

 

active directory - NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group - Server Fault

[edutech4schools]

What appears to have fixed the issue is this local policy 'run all Administrators in admin approval mode'.

 

Local Security Policy\Security Settings\Local Policies\Security Options\User Account Control: Run all administrators in Admin Approval Mode - Disabled

 

After changing the above I can now edit and save the Sims.ini file.

[edutech4schools]

Sims has updated. YAY