I Cannot create a .BAT file in the root of C “Access is Denied” Server 2k3

batch-filegroup-policywindows-server-2003

I have an oracle db server on a windows 2k3 box. I am currently unable to create or copy a batch file to the root of c. I can create batch files on different folders (i.e. in my user directory) or I can create .txt files in the root of C, but not batch files.

I know someone might say, just put the batch file somewhere else. We have an update from one of our software vendors that wants to create a batch file in C:\ and they don't want to rewrite their update for one customer.

They suggested it might be caused by our HBSS, but we have another 2k3 box for IIS that has no trouble creating batch files, and it has the same HBSS installed.

I have tried with several admin accounts. My account has domain admin, and my SA colleague has enterprise admin.

Is there something in GPO that prevents you from making bat files in C:\?

Best Answer

I know this question is old, but there doesn't seem to be a resolution so on the HBSS possibility.

You can navigate to the HBSS HIPS GUI:

  1. Click Start, Run, type explorer and click OK.
  2. Navigate to: C:\Program Files\McAfee\Host Intrusion Prevention.
  3. Double-click McAfeeFire.exe.

You can click on the tabs on the top of the GUI to see what the policies are that are being enforced, and what is being permitted and blocked.

If your HBSS admins are worth their salt as admins, they've divided out the servers by functionality and have applied policies based on those attributes. So it is VERY possible that McAfee is blocking this action. You'll need to work with your HBSS admins to get a waiver policy in place to be able to do what you want here if this ends up being the culprit.

It could also be the McAfee VSE blocking the creation...but this is much less likely than the HIPS.

Related Topic