No longer able to edit scripts in SYSVOL/domain/scripts on Server 2008

Question

We recently upgraded our domain controllers to Windows Server 2008 R2 (Still at functional level 2003).

I went to make a change to one of our login scripts in the SYSVOL\{domain}\scripts\ directory, despite the account I was logged in with having Enterprise Administrator and Domain Administrator permissions it will not let me edit the scripts or add new ones.

I've tried googling around to see if I can find any information but so far I'm turning up dry. Does anyone have any idea how I could fix this?

what happens when you go through netlogon? its probably share permissions issues. run dcdiag /test:netlogons n — tony roth, Dec 03 '10 at 21:50
Why not use GPMC for assigning scripts rather then assigning them directly on the user account? — joeqwerty, Dec 04 '10 at 00:07
I do assign them through GPMC, this is the creation and editing of the actual scripts. — TrueDuality, Dec 06 '10 at 13:22

score 1 · Accepted Answer · edited Apr 13 '17 at 12:14

1

Where you logged in from the local machine? Are you sure you aren't having problems with the UAC? By default your administrative privileges will be filtered away for you protection. Try accessing the folder from a remote machine while logged in as an account with admin privileges.

edited Apr 13 '17 at 12:14

Community

1

answered Dec 04 '10 at 01:08

Zoredache

130,897
41
276
420

I was remoted into the machine, while not exactly the same as logging in at a console, I wasn't manipulating the file through a network share. – TrueDuality Dec 06 '10 at 13:24
It was indeed UAC. That's annoying as hell. Thanks! – TrueDuality Dec 06 '10 at 13:54

score 1 · Answer 2 · answered Dec 04 '10 at 03:56

1

This is a UAC issue; many administrators are disabling UAC because of filesystem access issues like this (though disabling UAC is not recommended).

The fastest way to resolve this particular situation, in my experience, is to launch notepad with administrative elevation, and then open the file to be changed from within notepad (or substitute your preferred editor in place of notepad).

answered Dec 04 '10 at 03:56

aNullValue

447
5
10

I have tried editing in notepad using elevated privileges. I have not tried disabling UAC however. – TrueDuality Dec 06 '10 at 13:23

No longer able to edit scripts in SYSVOL/domain/scripts on Server 2008

2 Answers2