20,212 questions
Might try run as admin cmd.exe then from this elevated session start notepad.exe
--please don't forget to Accept as answer if the reply is helpful--
Cannot edit script files directly from SYSVOL folder
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 78%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E3%3C/text%3E%3C/svg%3E)
36584367
201
Reputation points
Hi,
We recently changed our PDC and when we access the scripts folder under SYSVOL using a domain admin account, whenever we try to change a script we are getting Access Denied error.
I have given Domain Admins group full permissions + ownership but problem persists. We did not use to have such problem using old DC server before.
To be fair we are able to launch Notepad as admin and open a batch file and be able to edit but its more convenient for us if we are able to do it directly.
Will await your replies. Thanks
Windows for business Windows Server User experience Other
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2021-05-04T01:41:38.477+00:00 Hi,
Just want to confirm the current situations.
If there's anything you'd like to know, don't hesitate to ask.Best Regards,
Sign in to comment
2 answers
Sort by: Most helpful
-
Anonymous
2021-04-26T15:29:11.313+00:00 -
36584367 201 Reputation points
2021-04-27T06:59:51.48+00:00 Hi,
This defeats the purpose which I want, ie, right click a bath file and click on edit. Then will be able to save the changes.
Sign in to comment -
-
Anonymous
2021-04-27T00:04:10.993+00:00 Hi,
Before going further, would you please tell how many DCs do you have?
Did all of them have the same issue?
When you check the permission on the sysvol folder, did you confirm the share permission?Best Regards,
-
36584367 201 Reputation points
2021-04-27T07:02:02.647+00:00 Hi,
We have 3 DC's in all
Yes all of them have the same issue
Yes all permissions are correct
-
Anonymous
2021-04-28T06:43:44.293+00:00 Did you check everything works well in your domain?
Dcdiag /v >c:\dcdiag1.log
Repadmin /showrepl >C:\repl.txt
Repadmin /showreps * -
36584367 201 Reputation points
2021-05-04T08:07:10.207+00:00 Hi,
Sorry for the late reply. All tests that I did passed but got stuck on the last one, ie, repadmin /showreps * since it gave me an error "LDAP error 81 (Server Down) Win32 Err 58"
Is this a problem?
-
Anonymous
2021-05-05T01:26:07.16+00:00 How may DCs do you have? Every DC works well by the command: Dcdiag /v >c:\dcdiag1.log, right?
Are there any Old DCs that no longer exist in real life, but exist in AD?Confirm Ports for LDAP: https://social.technet.microsoft.com/wiki/contents/articles/584.active-directory-replication-over-firewalls.aspx
Best Regards,
-
36584367 201 Reputation points
2021-05-10T09:23:27.283+00:00 Hi,
We have 4 DC servers and yes they all respond well to the command. All old DCs were removed from AD too
Something strange which I am also seeing today is that we created new Domain Admins and funny enough if we try and login with a new Domain Admin account via RDP, such account does not have access SOME shared folders on our File Server. I checked all permissions and Domain Admins group has Full Access rights. If on the other hand I login via RDP with an old Domain Admin user, I am able to open all shared folders.
I assume this is all related to the SYSVOL problem too?
-
Anonymous
2021-05-11T06:14:46.527+00:00 1,You may try to find if there are any replication issues by command:
repadmin /showrepl * /csv (replication situation for all the DCs)
repadmin /showrepl /all >c:\repadmin.txt (Inbound and outbound replication for one single DC)
Repadmin /syncall /APeD
2,Also check if there are any errors on the event viewer.
3,Please check connectivity for your new DC with network team. For AD required ports,
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd772723(v=ws.10)?redirectedfrom=MSDN
TCP and UDP 389
TCP and UDP 88
TCP and UDP 53
TCP and UDP 445
TCP 135
TCP Dynamic
UDP 123
TCP and UDP 464
UDP 138
UDP 137
TCP 139
Best Regards, -
36584367 201 Reputation points
2021-05-31T09:56:52.337+00:00 Hi,
Sorry for the long delay but got caught up with work. All DC's are syncing perfectly from one to the other and there are no errors. In fact, the replication is so fast, that once we change an object from one DC, it gets updated on all other DC's in splits of a second. I just cannot understand why we have these issues...
Sign in to comment -