Permissions Issue Grrrrr

[MuttsNutts]

Hi this issue is driving me nuts as i can't see what is wrong?

 

Most of our servers are 2012 R2 and what i find is if I login to the majority of the our servers with the main account domain\Administrator then on any drive, folder or file including sub folders and files i can right click go to properties and the dialog box shows fine no issues all tabs are shown.

 

but if i login the same servers as a user account that is a member of the Domain Admins or even Domain Enterprise group and do the same right click properties thae dialog box shows with one thing missing the "Security Tab" this is the same effect on all servers on the same domain, same for PC's on the same domain too.

 

This means our team of I.T techs that only have access to the their own "domain admin" account can't set permissions or make amendments to current permissions, it dont matter if the servers a DC, file server or any other type of server the issue is the same accross the lot (same issue on domain admin accounts that access network drives from a PC the security tab is missing)

I've looked into this and some people point this at UAC issues, i can say this has been disabled on 2 of the servers and reboots given, still the same issue.

 

I've looked at the local policy and checked that UAC has been set this way Clint Boessen's Blog: You don't currently have permission to access this folder and still no change.

 

if you have questions to ask or any advice please let us know

 

Thanks

[andydis]

have you checked its not s GPO?

move one user (IT Tech)? to the same OU as administrator, gpupdate the pc and login , does the tab appear?

[MuttsNutts]

The OU the IT Tech's use have blocked inheritance for GPO's for all the lock down stuff they do run a few GP's but they are just drive mappings, IE proxy and default domain policy - I will give your idea a try and see if it makes a difference, there maybe a nice hidden GP setting in one of those.

 

Thanks will let you know

[andydis]

Also check

 

To Disable Security tab:

 

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 1 /f

 

or

 

 

Please navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

\Explorer and locate Nosecuritytab registrykey

 

 

 

To Enable Security tab:

 

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 0 /f

 

In the Group Policy window please navigate to User Configuration -> Administrative Templates ->

Windows Components -> Windows Explorer and open Remove Security tab