I got a new computer with Windows 10. I have an account belonging to the Administrators group.
In the beginning, everything was fine. I copied some installers to the D drive, installed some software, and ran Windows update. Afterwards, I lost my access to D drive! When I wanted to create a new folder, I got the error message "Destination folder access denied".
I checked the security settings, they appeared all right.
I read these two articles
Domain Admins group denied access to d: drive
Why can't I browse my D: drive, even if I'm in the Administrators group?
The problem was not quite the same. I can still browse D drive, but I cannot create, copy or delete files.
I also found this page "all users" required for folder access? , and confirmed that GPEDIT.MSC is the same as suggested in this article.
Many thanks for any suggestion in advance.
Best Answer
This behaviour is irritating, but correct. Speaking in the name of the sometimes bizarre microsoft world.
You have to know that you are not in the Administrator group, when you (as a member of that group) start a application. Like in this case the Windows Explorer.
The "Administrators" group is part of the "Admin-Token-Filtering-Protected" group, like the Domain-Admins themselves. you have to start things "As Administrator" to actually act as you were a member of those groups. Fun-Fact: the windows explorer itself cannot be started 'As Administrator' without messing with the registry (or disabling the UAC completely).
You will be able to do everything on that drive, when you start your application with a rright click and 'Run as Administrator'. You cannot start the explorer with an admin token, so you have to use other tools, set the infamous
LocalAccountTokenFilterPolicyto0or allow your user (or users group) access to the drive. Welcome to the bizarre world of local security stuff in the 21st century.