Windows Server 2008及以上系统磁盘无法查看（About UAC and ACE）

Posted 2020-09-26

在windows Server2008及以上系統，如果UAC Enabled，ACE列表中不會包含Administrators成員的SID，所以即使你是administrators的成員，也無法訪問D盤！

 

解决方法参考如下文章：

Changes to tokens When a user who is a member of the Administrators group in Windows® XP or Windows Server 2003 logs on to a computer, that user‘s token contains the Administrators group SID, and the user has the same permission as the Administrators group. In Windows Server 2008 and Windows Vista, if UAC is enabled, the Administrators SID is still present in the token but is set to Deny only. When performing access control, such an entry in the token is used only to deny access—in other words, to match Deny ACEs. Any Allow ACEs for that SID are ignored. That means that you are not truly an administrator all the time, even if you log on to the computer as one

 

http://serverfault.com/questions/75691/why-cant-i-browse-my-d-drive-even-if-im-in-the-administrators-group