Guest w2ks Posted January 7, 2009 Posted January 7, 2009 I know that UAC is supposed to make things more secure in windows server 2008. the thing is, it's causing me many problem i can't resolve. Here is one. after i add my domain account to the administrators group in windows 2008, and log in using the domain account. i barely have access to anything. i can't even open a folder. it's saying access-denied. a simple program like BGINFO that display system information as desktop wallpaper won't even run because i don't have access to the program files folder. Yes, I double check that my domain user account is in the Administrators group. When i turn UAC off, everything works just fine, and it frees up maybe quite a bit of RAM too. does anyone know how to resolve this? Quote
Guest Peter Foldes Posted January 7, 2009 Posted January 7, 2009 You apparently do not know what a Server is or can do. Repost your issue to a group where Server issues are discussed. On the web: http://www.microsoft.com/communities/newsg....server.general -- Peter Please Reply to Newsgroup for the benefit of others Requests for assistance by email can not and will not be acknowledged. "w2ks" <w2ks@discussions.microsoft.com> wrote in message news:69276978-8D19-454E-ACBF-B80276CD9950@microsoft.com...<span style="color:blue"> >I know that UAC is supposed to make things more secure in windows server > 2008. the thing is, it's causing me many problem i can't resolve. > > Here is one. > after i add my domain account to the administrators group in windows 2008, > and log in using the domain account. i barely have access to anything. i > can't even open a folder. it's saying access-denied. a simple program like > BGINFO that display system information as desktop wallpaper won't even run > because i don't have access to the program files folder. > > Yes, I double check that my domain user account is in the Administrators > group. > > When i turn UAC off, everything works just fine, and it frees up maybe quite > a bit of RAM too. > > > does anyone know how to resolve this? </span> Quote
Guest Anteaus Posted January 11, 2009 Posted January 11, 2009 "w2ks" wrote: <span style="color:blue"> > after i add my domain account to the administrators group in windows 2008, > and log in using the domain account. i barely have access to anything. </span> If you mean the account you use to log-on to desktops other than the server, NEVER do this. Making that account a Domain Admin gives it unlimited powers on the network. Which in turn creates the risk of malware on a desktop attacking the server's OS via the C$ share -or attacking other desktops too. Create an Admin-level account for use at the server console, and keep this separate from those accounts used for LAN access. Security can be improved by setting a policy which restricts server-console logon to a specified group. Be careful not to lock yourself out when doing this, though. And, yes, UAC is a lame attempt to imitate Linux' su/sudo commandset. Difference is that su works. Since no-one but responsible persons should be logging-on at the server console anyway, and these persons should not be browsing dodgy sites or whatever using the server, it is reasonable to turn it off. Hope this helps. One of the issues of AD networks is that they include a number of non-obvious but very dangerous pitfalls for those who are trying to DIY a domain without formal training. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.