Windows 10: Domain User Permissions Not Working on Windows 11 Home – Shared Printer Access Denied

Hello everyone,I'm experiencing a specific access issue with a new laptop running Windows 11 Home Edition in a domain-managed environment.We have a Windows Server 2019 that manages the domain for an educational institution. Our users students, technicians, and teachers are organized into cascading security groups. For example, users in grp_rw_depEnsino are granted access to a shared printer through a permission hierarchy like this:grp_print_04 < grp_rw_depEnsino < grp_professores < grp_servidores_campus < grp_servidoresThis structure works flawlessly on domain-joined Windows 10

:)

 

folder creation and sharing, i want to create an admin user that have only permission to modify folders and file but not have domain admin access.

Hi Mindspaceoutsourcing,

Welcome to Microsoft Community.

I'm Hahn and I'm here to help you with your concern.

To create an admin user with the permission to modify folders and files but not have domain admin access, you can follow these steps:

Step 1: Create a new user account

1. Log in to the computer or server as an administrator.
   
2. Open the "Control Panel" and navigate to "User Accounts".
   
3. Click on "Manage another account" and then "Add a new user account".
   
4. Enter a username and password for the new user account and click "Create Account".
   

Step 2: Add the user account to the local Administrators group

1. Open the "Control Panel" and navigate to "Administrative Tools".
   
2. Click on "Computer Management".
   
3. In the left pane, click on "Local Users and Groups".
   
4. Click on "Groups" and then double-click on "Administrators".
   
5. Click on "Add" and enter the username of the new user account.
   
6. Click "OK" to add the user account to the Administrators group.
   

Step 3: Create a shared folder and grant the new user account full access

1. Create a folder on the computer or server that you want to share.
   
2. Right-click on the folder and select "Properties".
   
3. Click on the "Sharing" tab and then click "Advanced Sharing".
   
4. Check the box next to "Share this folder".
   
5. Click on the "Permissions" button.
   
6. Click "Add" and enter the username of the new user account.
   
7. Select the new user account from the list and click "OK".
   
8. Grant the new user account full control permissions by checking the box next to "Full Control".
   
9. Click "OK" to save the changes.
   

Step 4: Set file and folder permissions

1. Right-click on the folder you want to modify and select "Properties".
   
2. Click on the "Security" tab and then click "Edit".
   
3. Click "Add" and enter the username of the new user account.
   
4. Select the new user account from the list and click "OK".
   
5. Grant the new user account the necessary permissions by checking the appropriate boxes (e.g., "Modify", "Write", "Read & Execute").
   
6. Click "OK" to save the changes.
   

Step 5: Remove the new user account from any other groups with domain admin access

1. Open the "Control Panel" and navigate to "Administrative Tools".
   
2. Click on "Computer Management".
   
3. In the left pane, click on "Local Users and Groups".
   
4. Click on "Users" and then double-click on the new user account.
   
5. Click on the "Member Of" tab.
   
6. Remove the new user account from any groups that give it domain admin access.
   
7. Click "OK" to save the changes.
   

By following these steps, you should now have an admin user with the necessary permissions to modify folders and files but without domain admin access.

I hope this helps. If there is anything not clear, please do not hesitate to let me know.



Your Sincerely

| Microsoft Community Support Specialist

 

Shared printer Driver download Windows 11

Our company started testing Windows 11 on our new equipment and we've stumble into a few bugs that we thought was worth communicating with the community.

Adding a shared printer from a windows 2012 r2 print server from a windows 11 a new laptop ( Lenovo T15 ) asks to download the printer's driver and to do so, you need the admin credential. ( so far so good )

When we enter the local admin user ( .\Administrator ), the device gives an access error. ( Windows cannot connect to the printer. Access is denied. )

If you grant your domain user local admin, it will download the driver as usual.

I believe that when you enter the local admin password ( .\Administrator ), it overwrites the domain user Credential and try to access the printer as local admin instead of domain user.

Let me know your thought.

Dany.B

 

Unable to access a folder, it denies permission

Hi,

Thank you for contacting Microsoft Community. I understand that you have an issue with permission.
I will surely help you to fix this issue.

To understand the issue better, I would need more information from your end.1. Is the issue specific with a particular folder?

2. What is the complete error message?

This issue could have occurred due to these reasons:

• 
  Permission issue.
  
• 
  Corrupt User Account.
  
• 
  Damaged files.
  

I suggest you to try the steps under the section Issue 1:
I get an "Access Denied" error message when accessing or working with files and folders
in the following article and check if it helps.

"Access Denied" or other errors when accessing or working with files and folders in Windows

http://support.microsoft.com/kb/2623670

Note:

1. Applies to Windows 10.

2. You may need to be logged on as an administrator to change file and folder permissions.

Hope this information helps. Reply to the post with updated status of the issue so that we can assist you further.