Uac On Windows 2008 : Local Vs Domain

[mcdsweet98]

Hi Guys,

I am having this issue with UAC on a windows server 2008 workgroup servers. I am trying to access administrative shares on this workgroup machines but it won't allow me although I am already in an admin group. I know this is caused by UAC since the administrator built-in ID works.I have this following questions needed for help

1) How come UAC blocks workgroup servers but not those joined domain? Even if our DC is Windows Server 2008, should the UAC be blocking those Windows 2008 servers parked under this Domain Controller? Apparently Windows 2008 domain servers are working fine accessing the administrative shares.

2) By default, when Microsoft commissions a windows server 2008 server, is the administrative shares blocked by default? and only administrator built in ID is able to access it?

3) Any workaround to go into the administrative shares for this workgroup servers using any other local IDs in the administrator group without disabling UAC or tweaking the Registry policy Token? Any other alternatives?

Please help.


Thank you

 

[ICTCity]

If you are on DOMAIN ADMINS group, you are an admin at DOMAIN LEVEL, not at workgroup level. If must specify the user which can access the share.

 

[mcdsweet98]

Hi there.
Yes the ID is in Domain ADmin group. Is that why I am able to access the administratve shares? Because the ID is in Domain Admin? But should the UAC on the DC be controlling the Domain Admin ID as well?

The problem is happening only when I am accessing the administrative shares of a workgroup server using an administrator ID. However Built in Administrator ID works.

Any advice?

 

[ICTCity]

Yes, it is correct.

You must add the account(s) to the LOCAL ADMINISTRATORS GROUP (on the server side, where you can access shares only with Administrator's account).