N
N
NikanorovKir2017-06-18 02:24:32
Active Directory
NikanorovKir, 2017-06-18 02:24:32

How to correctly restrict disk access rights in AD?

There is a local disk, I want to restrict access to the disk to all users except administrators. The essence of the plug: I remove the rights to everyone except the system and the FS01\Administrators group (FS01 is the machine name) and the domain administrator loses access to the disk. Please explain why this is happening, because the Domain Administrators group is added by default to the Administrators group on local machines (I checked, the group is present). If I add disk rights explicitly, i.e. CORP\Domain Admins, access is restored.
Windows SRV 2012R2.
ps. I apparently don’t understand something global in the operation of the rules in ntfs, so I really want to figure it out, and not stupidly register the rights manually.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
Y
yosemity, 2017-06-19
@yosemity

UAC works. Run any "commander" as administrator and check.
Prescribe manually or through GP rights.
PS I note that UAC does not work over the network. Maybe you don't need to change anything?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question