No longer able to edit scripts in SYSVOL/domain/scripts on Server 2008

Question

We recently upgraded our domain controllers to Windows Server 2008 R2 (Still at functional level 2003).

I went to make a change to one of our login scripts in the SYSVOL\{domain}\scripts\ directory, despite the account I was logged in with having Enterprise Administrator and Domain Administrator permissions it will not let me edit the scripts or add new ones.

I've tried googling around to see if I can find any information but so far I'm turning up dry. Does anyone have any idea how I could fix this?

Solution 1

Where you logged in from the local machine? Are you sure you aren't having problems with the UAC? By default your administrative privileges will be filtered away for you protection. Try accessing the folder from a remote machine while logged in as an account with admin privileges.

Solution 2

This is a UAC issue; many administrators are disabling UAC because of filesystem access issues like this (though disabling UAC is not recommended).

The fastest way to resolve this particular situation, in my experience, is to launch notepad with administrative elevation, and then open the file to be changed from within notepad (or substitute your preferred editor in place of notepad).

Comments

[tony roth]

what happens when you go through netlogon? its probably share permissions issues. run dcdiag /test:netlogons n

[joeqwerty]

Why not use GPMC for assigning scripts rather then assigning them directly on the user account?

[abby]

I do assign them through GPMC, this is the creation and editing of the actual scripts.

[abby]

I have tried editing in notepad using elevated privileges. I have not tried disabling UAC however.

[abby]

I was remoted into the machine, while not exactly the same as logging in at a console, I wasn't manipulating the file through a network share.

[abby]

It was indeed UAC. That's annoying as hell. Thanks!