Destination folder access denied you need permission

Tyrel Ferguson

Reputable
Sep 5, 2014
1
0
4,510
I have been a computer consultant for decades ans I have NEVER heard this simple, singular issue addressed with other than MS pros cattily pretending to explain it away in words that mean nothing to the rest of us.

I have had to radically emasculate several networks of security issues in order to get beyond this absurd barrier to the transfer of files over even the most simplistic of networks The pompous and non-assistive pretentious BS that MS experts vomit all over the web only adds insult to injury.

I have two computers, a desktop and a notebook. Both are running Win 7 Home Premium. They both can see and use the files on the other but I CANNOT COPY OR MOVE ANY FILES FROM ONE TO THE ANOTHER.

I would be delighted to have someone tell me how I might accomplish that/ they are even empowered to include in their explanation what a complete idiot I am not to have known how to do that before now.

Whip me. Denigrate me. Shame me before the world for my inability to understand how I might accomplish a task that should be a basic function of any network connectivity, but stop using such cryptic and unintelligible terms to describe the indescribable methodology as to pretend "the rest of us" might be able to grasp and implement them. In case you "experts" haven't noticed, NOBODY GETS IT!!

~cuidate (source link: http://www.tomshardware.com/forum/60286-63-destination-folder-access-denied-permission)


I am writing in the hopes that I can help provide a possible solution for this problem. We recently revamped some of our images for the university that I work for, and I noticed that I was running into some rights issues. This was the first most useful post that I came across. Atleast, reassuring me that I wasn't suffering alone. After hours of delving and reading I found what I was looking for.

History of Troubleshooting:
Verified Rights on both Source: share and Destination: system.
Ran the takeown and icacls commands to no effect.
Verified that UAC was disabled.
During my troubleshooting I realized that my copies were consistently giving access denied (via command line xcopy, robocopy, copy, etc.). However, when I used explorer to copy I received the below:

Untitled.png


Yes, clicking continue allows the file to be copied. However, I'm trying to script an installation via command line and pushing through psexec. I can't afford prompts for elevation, and I haven't found a way to elevate via command line.

So I continued my search by reading 8 different forum threads from start to finish.
Then I found this:

To help prevent malicious software from silently installing and causing computer-wide infection, Microsoft developed the UAC feature. Unlike previous versions of Windows, when an administrator logs on to a computer running Windows Vista, the user’s full administrator access token is split into two access tokens: a full administrator access token and a standard user access token. During the logon process, authorization and access control components that identify an administrator are removed, resulting in a standard user access token. The standard user access token is then used to start the desktop, the Explorer.exe process. Because all applications inherit their access control data from the initial launch of the desktop, they all run as a standard user as well.

After an administrator logs on, the full administrator access token is not invoked until the user attempts to perform an administrative task.

So any time that you try to use admin credentials, you should be given a UAC prompt to invoke that Admin token, giving you access to make that change. Now if that is not working, you'll want to check your UAC settings.

Most likely, the setting you need to disable is the "User Account Control: Run all administrators in Admin Approval Mode". You can change that behavior by modifying the "EnableLUA" key in the following loctaion:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

That should make admins run as admins all of the time. This is dangerous and I would recommend that you turn this feature back on for day to day use.:

~Technet (source link: http://superuser.com/questions/139841/access-denied-even-though-im-an-administrator) (Link with the info you want: http://technet.microsoft.com/en-us/library/dd835564%28WS.10%29.aspx#BKMK_AdminApprovalMode)



SOLUTION: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System > Set "EnableLUA" to 0
This key if enabled forces administrators to answer a prompt for elevation when trying to perform "A LOT of different tasks". Which makes scripting and working remotely VERY difficult.... maybe even.... impossible.

I hope this reaches both Cuidate and Dimebag; and proves to be their solution.
 

Skippy27

Distinguished
Nov 23, 2009
366
0
18,860
What my work has done is created a service that has elevated privileges already and then uses that service to install/copy/do whatever you want that you need full admin rights for. How they do that I don't know as I am not a programmer. I only support the machines and I know that for many installs I have to run a special VBS that invokes the service and thus does what we need it to do while retaining full security of having UAC on.

The networking issue and doing a simple copy from one client to another is a whole other thing but I know with UAC on it gets quite goofy in the places it will or will not allow you to copy files from remote sources. How about if you map a drive to that machine?