Thursday, February 26, 2009

Administrator doesn't have permission to access shared network resources

QUESTION:
I'm having problems getting to some of the shares on the network from my Vista computer even though I'm logged on with an administrative account. I can access those same shares from my XP computer with the same network logon. Any idea what's going on?


ANSWER:
Most likely the problem is that Vista's User Account Control (UAC) runs all accounts as standard users by default. When you log on with an admin account, two access tokens are created - one with administrative rights and one with standard user rights. Mapped network shares may be linked to the current logon session so if the share was mapped using the filtered access token (without admin rights), you may have this problem. You can fix it with a registry edit that tells Vista to share the network connections between the filtered access token and the administrative token for members of the Administrators group. Here are the steps (be sure to back up the registry first):


1. Open the registry editor and navigate to the following key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ System
2. Click New and select DWORD Value.
3. Name the new value EnableLinkedConnections
4. Right click the new value and select Modify.
5. In the Value Data box, type 1
6. Click OK.
7. Close the registry editor and restart the computer

No comments: