I'm logged in with my domain admin account, and I know my account is part of the Domain Admins group, which is also a member of the local Administrators group. According to the PowerShell ACL check, both groups should have Full Control access, yet I'm unable to access the root of my data drive. I can still access subfolders by typing the path manually in File Explorer, and these folders have the proper permissions for the local admin or Domain Admins groups. What am I missing here? I found that if I give myself explicit Full Control using icacls, I can access the drive, but I'm confused why the standard permissions aren't working as expected.
1 Answer
It sounds like you might be dealing with an admin token issue. Sometimes, the UAC prompts can mess with access, especially if you're launching Explorer normally. Have you tried killing and restarting Explorer from Task Manager after selecting the 'create with admin privileges' option? That might help with the access issue.
I tried that approach, and it worked! Thanks for the tip!