So this is a wide ranging problem though out a local machine we are building. I am just going to use 1 file example though. We are restricting acces to the cmd (command executable) file. We have created a user called sysadmin and put them into the Built-in Administrators group. I then take ownership of said file (cmd) as Administrator group then give full control permissions to both system and Administrators group. Now if I try to run it I get it is not accessible you may not have the appropriate permissions. UAC is on but we have it as elevate automatically. Now if I add sysadmin to the security setting and give it full control then I can access the file with no problems. So this group seems not to be working. Thank you for any help.

Hi, If your user account is a member of the Administrators group, but is not the Administrator account itself, then, by default, the programs that you run only have standard user permissions. You must explicitly specify that you require the use of your administrative permissions.Alex Zhao TechNet Community Support

Hi, If your user account is a member of the Administrators group, but is not the Administrator account itself, then, by default, the programs that you run only have standard user permissions. You must explicitly specify that you require the use of your administrative permissions.Alex Zhao TechNet Community Support