Windows Server 2012 permissions

dmegatool · February 11, 2014

So I got some folders, each shared with different groups. For every users, everything works fine. They only see the folders they're supposed to and all...

My problem is with domain admins. I'm one of them.

If I mount the a shared folder like so \\server\folder1... I can access everything regardless of what permissions is set.
If I remote desktop the server and try to access, I'm denied, as expected.
If I use \\D$ to mount the drive then go to folder1, I'm denied, as expected.

So what's the deal ? Why can't I mount the folder "normally" with \\server\folder1 ? I know that I can grant myself access even if I'm denied but it at least tell me I shouldn't be there.

jiaozi · February 11, 2014

Post screenshots of the permissions.

dmegatool · February 11, 2014

Post screenshots of the permissions.

Sorry for the french OS. You'll figure it out

Here's the list of permissions. I changed the owner back to administrators to actually see the listing. "Direction" was the owner:

And here's the effective permissions for administrators :

macpro622776 · February 12, 2014

So I got some folders, each shared with different groups. For every users, everything works fine. They only see the folders they're supposed to and all...

My problem is with domain admins. I'm one of them.

If I mount the a shared folder like so \\server\folder1... I can access everything regardless of what permissions is set.

If I remote desktop the server and try to access, I'm denied, as expected.

If I use \\D$ to mount the drive then go to folder1, I'm denied, as expected.

So what's the deal ? Why can't I mount the folder "normally" with \\server\folder1 ? I know that I can grant myself access even if I'm denied but it at least tell me I shouldn't be there.

I'm not sure about what you're trying to say...what do you mean by mounting the folder normally?

dmegatool · February 12, 2014

I'm not sure about what you're trying to say...what do you mean by mounting the folder normally?

Like adding a network drive with "\\server\folder1". Regular users can't use \\server\D$, only admins can. I'm just wondering why when I'm mounting the drive with D$ then going to folder1 permissions works. But when I access the same place with the "\\server\folder1", it's different...