Hello
Dear Reader! I've been working on setting up a virtual environment for
quite some time. When last I wrote about it, I described issues I was having
due to cloning the same server that I had set up as my Domain Controller, Dude
Where Did my AD Account Go? Troubleshooting Duplicate SID’s.
Well
I’ve gotten further down the road and today I was setting up some new servers
to do some work with Availability Groups.
The Servers were cloned, SID’s were different from the Domain
Controller, I renamed the servers, added them to the domain, set up my
additional hard drives, and started copying over SQL Server files for the
installation. Then I get this error.
“So
Balls”, you say, “did you remember to add your domain account as a Local Admin?”
Excellent question Dear Reader, you’re on your game today! I did. I even logged on as the local server’s Administrator and double check that my account was listed in the Administrators group.
Excellent question Dear Reader, you’re on your game today! I did. I even logged on as the local server’s Administrator and double check that my account was listed in the Administrators group.
Initially
the way I had gotten around this error was by logging in as the Local Server
Administrator. I found that account had
all the correct permissions. This wasn’t
a satisfying resolution. If I didn’t
have access to copy files, what else was I missing? Would this cause an issue with my SQL
Installation?
SAVE ME GOOGLE/BING
Help me help You Windows! HELP ME HELP YOU! |
I
was stumped, so I turned to the Intrawebs.
Google/Binging the error message got me some results. The first couple links didn’t help. Then I came across a message board from the
Windows Server forums, Destination
Folder Access Denied – Copying file to root of C:\.
I wasn’t trying to access my C:\ but these steps worked for me. I’m going to detail out the same steps that Rick Tan did in the forum post.
First open up run and type in gpedit.msc to open the Group Policy Manager.
I wasn’t trying to access my C:\ but these steps worked for me. I’m going to detail out the same steps that Rick Tan did in the forum post.
First open up run and type in gpedit.msc to open the Group Policy Manager.
Next
expand the tree by Windows Settings | Security Settings | Local Policies |
Security Options. Scroll to the bottom
we are looking for Policies that begin with User Account Control. First up User Account Control: Behavior of
the elevation prompt for administrators.
You may not want to disable this on your server at work, but these are my VM’s. I’ve given my account Server Admin level access. I don’t want to have to answer a prompt every time I need to do Administrative things. We want to set this to elevate without prompting.
You may not want to disable this on your server at work, but these are my VM’s. I’ve given my account Server Admin level access. I don’t want to have to answer a prompt every time I need to do Administrative things. We want to set this to elevate without prompting.
Click
OK and let’s move on to our next one.
User Account Control: Detect application installations and prompt for
elevation. Okay I’m an Admin. I’m going to install things on my
server. Otherwise this account wouldn’t
be an Admin. Let’s disable this, I don’t
want to be prompted with “are you sure?” every time I try to install something.
Click
okay and now onto User Account Control:
Run all administrators in Admin Approval Mode. Seriously?
How many times do I need to say I’m sure this Admin account is an Admin?
Click
Disabled and OK. So once we change these policies you no longer get the annoying ARE YOU SURE, ARE YOU SURE?, ARE YOU SURE?,prompts. Sometimes you just want
to yell! I’m an Administrator, I granted
this account Admin access. YES! IT’S A F#(%ING ADMIN!
“So Balls,” you say, “You okay there?”
Sorry
Dear Reader, redundant security frustrates me. The steps worked for me though. When I try to copy over SP1
for SQL 2012 it succeeds. Refreshingly enough, I don't get prompted to ensure I wanted to really run the item I double clicked on. What a wonderful world.
For these settings to take affect a reboot will be required. So now it's time to sit back, and enjoy a pop up free world. As
always Dear Reader, Thanks for stopping by!
Thanks,
Brad
Thanks,
Brad