Admin Rights Problem

[Scarface]

hey guys, i have a server running Server 2003 r2. I have a user that i have given Full Control over the whole server meaning every folder on the drive he can access and do whatever he wants to(supposibly). The Problem im having is i gave the user full control rights over everything, but they can still not copy/paste or move/delete. They can open up everything but thats it. I have when into advanced permissions and gave the person every right to a folder they could have but they still cannot do anything to that folder. Is there something that im missing? i have already created them a new account just to see if there was something wrong with there existing account but that didnt work either. Any help on this would be appreciated. Thanks!

[ua549]

Inherited permissions.
Often denial happens because the person is a member of too many groups and one of those groups does not have permission to do something. A single deny overrides others.

[Scarface]

you are correct this person is my boss and he is in 100 different groups lol....thanks for bringing that up though i guess im going to have to sift through all the groups hes in to see if there is a deny/explicit deny somewhere. Only thing about that though that throws me off is the fact i created a new account and added him to the administrator group and also manually gave him full rights to everything just to make sure and still with the new account he could not do anything.

[gunderstone]

Here is a good overview on Best practices for permissions and user rights that you might want to look over:

http://technet.microsoft.com/en-us/library/cc779601.aspx


The Effective Permissions tool might be helpful for you in this situation:

http://technet.microsoft.com/en-us/library/cc756795.aspx