K
K
Kenny002021-11-24 11:41:30
Active Directory
Kenny00, 2021-11-24 11:41:30

Why can't a user in the Domain Admins group access a directory that the group has permission to access?

A user in the Domain Admins group cannot access a directory to which the group has permissions
There is a Tender folder, by the Domain Admin user, with no restrictions.
If you click continue, then this user is imprinted in the rights and permissions, shovels everything and then there is access, respectively, but this is not correct, there are groups.
619df893062da051249432.png
Yes, there is no access to view permissions until you click the "continue" button.
619df92d7dfa0195301019.png
After clicking continue, you can already see your rights, but some kind of incomprehensible situation, the group is also the owner of the object.
619df969cfdc4614693413.png
But the most incomprehensible thing is that domain administrators do not have access, judging by the sign
619df99fc34c7691221658.png
The most interesting thing is that if you select a user specifically from the domain administrator group, then the rights are full.
619df9e8ba0be781315650.jpeg

Actually, the policy itself is lower, I don’t understand what kind of miracles ... (although miracles do not happen) what could I have done wrong?
619dfa5600736700066933.png

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Alexey Dmitriev, 2021-11-24
@Kenny00

Don't use built-in principals to gain access and you'll be fine.
This is normal behavior.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question