My fileserver running Windows Server 2008 has two logical drives; the C: drive contains all of the system and application data, and the D: drive contains all of the business data. There are several shares on the top level of the D: drive that are working fine. However…
When logged into the fileserver interactively via Remote Desktop, only the Domain Administrator and local Administrator accounts can browse the D: drive. I set up an account called "Maintenance" and added it to the local Administrators group, but when logged in with this user, I can't browse into the D: drive. The D: drive has the following permissions ACL:
Full Access - SYSTEM
Full Access - MACHINE\Administrators
It won't even let me view the ACL for the E: drive. So I tried taking ownership of the E: drive, then I can read the ACL, and "Effective Permissions" says that I have full access. But I still get this error message.
Location is not available
D:\ is not accessible.
Access is denied.
Best Answer
Sounds like UAC to me and access to the drive requires elevation - what happens if you run a cmd shell as Administrator (while running as your Maintenance account)? Can you see the contents of the drive then? Local Administrator and Domain Admins are automatically elevated when needed under 2008 by default, I don't think mere members of the administrators account are.
Edited to add:
You can modify this behaviour by Group Policy however bear in mind that the default is set that way intentionally - the specific policy you want to change is "User Account Control: Run all administrators in Admin Approval Mode" - you can find details on how to do this in this MSDN article.