I work locally on a 2008 R2 logged in with my domain account, which is a member of Administrators via an AD group. I sometimes get a prompt that says I dont have rights to a folder. Its as if I am not working as a member of the admin group, If I choose continue my AD account is given permission to the folder. I am finding file/folder permission/security management in 2008 different than 2003, and perhaps not in a good way. What mechanism in 2008 is causing this? Thank you!

This sounds like UAC. Basically in Windows 7/Server 2008, even though you are a domain administrator, when you log onto the system, you are logged in with the least permissions required. When you attempt to run an app or console that needs admin level privileges, you are prompted for credentials. This is a great method to prevent software from gaining access to sensitive areas of the OS without providing the username/password to elevate permissions. Of course, this "feature" can be disabled. Guides and tutorials, visit ITGeared.com.

There are more alternatives causing this effect. Here are some of them (list is not complete): 1. SMB versions in W2K3 and W2K8 are different, namely SMB 1 and SMB 2. Unless they settle the lower version, they have problem. You can decrease the version in W2K8. 2. It depends how you address the shared folder. For FQDN, error in DNS settings may cause problems. 3. Check advanced settings of network cards (things like jumbo packet may do the problem, search Internet for other advanced parameters.) 4. Update NIC drivers. Use the server vendor's driver namely for scenario with virtual lans Regards Milos

Good advice, but I am logged in locally so none of the network resolutions apply. It works fine when I access the folders from the network. Its definately a UAC issue. I was hoping I could work with it on, but that is not the case. I suspected as mucn, but confirmation is alway nice.

Ive played around with UAC and its definately the issue. I dont mind being prompted. However, it adds my account to the ACLS of the folder/file. That doesnt make sense. Perhaps I need to run in the admin mode or enable/disable another UAC setting.