Permissions on Local Server

[Chrish5]

I'm having trouble editing files as the Domain Admin account on the server.

 

I have a local 2022 Server, if I'm logged in as the local administrator account I can change the files in question (D:\folder\text.txt)

If I'm logged in as domain\admin account and open the file in notepad it won't let me edit it. It asks me to save it elsewhere. I can then replace the file in question through Windows Explorer and just have to choose 'Continue' on the UAC prompt

If I open up notepad first as administrator I can open the file and then save fine.

domain\admin is a member of the local administrators group

domain\admin has full control to the folder and files in question

No user/group has any deny permissions to the files

I've taken ownership of the files

UAC is at it's lowest setting

If I access the file from another workstation or server as domain\admin I can edit the files through the shared folder or through the hidden share fine.

 

What setting is stopping me editing these files easily?

[jthompson]

I think that's expected behaviour for UAC when it comes to built-in security groups such as the local adminstrators group. Something to do with explorer not running as an elevated process.

 

You'll find that if you create a custom security group, add your user to it and then give that group suitable privileges on the files/folders in question you'll find that it works as expected.