Mark Minasi's Tech Forum
Register Calendar Latest Topics
 
 
 


Reply
  Author   Comment  
Pieter

Avatar / Picture

Senior Member
Registered:
Posts: 216
Reply with quote  #1 
Anyone using User Profile Disks for their RDS environment ?

When I logon to the UPD server as Domain\admin1 and try to mount a guid.vhdx file I get an error:

  "E:\ is not accessible; access is denied"
  minasi.jpg
This is what I already know:
- The VHDX file is not locked, verified with Sidder.exe.
- The VHDX is mounted (I get an extra driveletter), but I don't have access.
- I get the error on my pre-production environment, but I didn't had it on a lab environment (servers on Azure, not fully patched - I don't have access to that environment anymore)
- I have a colleague who mention the same error on his production server (his UPD server is Win2008R2, he mounts the VHD file from a Win2016)
- I don't get the error if I doubleclick the VHD that corresponds to the DOMAIN\admins1 user.
- I don't get the error if I logon as Local Administrator on the UPD server.

I find many articles on the Internet that confirm that this should work.  I have a feeling that it could be a bad patch.


__________________
Pieter Demeulemeester
0
Donato

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 18
Reply with quote  #2 
https://social.technet.microsoft.com/Forums/windowsserver/en-US/0f518196-61c3-489b-988e-527720d4101b/windows-server-2016-user-profile-disk-administrator-is-denied-access?forum=winserverTS

Is there anything in the event viewer?
0
cj_berlin

Avatar / Picture

Senior Member
Registered:
Posts: 288
Reply with quote  #3 
Well, since "Administrator" is behaving differently from other admin accounts, I would say this is UAC-related.
__________________
Evgenij Smirnov

My personal blog (German): http://www.it-pro-berlin.de/
My stuff on PSGallery: https://www.powershellgallery.com/profiles/it-pro-berlin.de/
0
Pieter

Avatar / Picture

Senior Member
Registered:
Posts: 216
Reply with quote  #4 
@Donato,
Thanks for the link. That describes exactly the problem. With local admin I can access the UPD, but that's a weird work around.
Can't check the event viewer now, will see tomorrow.

@cj_berlin,
Thanks for the tip, will try tomorrow if UAC is related.

__________________
Pieter Demeulemeester
0
Pieter

Avatar / Picture

Senior Member
Registered:
Posts: 216
Reply with quote  #5 
I see the following in the Event Viewer.

When mounting (doubleclick) the VHDX :
- System, Information, Source=NTFS, ID=98, description="Volume G: (\Device\HarddiskVolume12) is healthy. No action is needed."

When unmounting (eject) the VHDX :
- System, error, Source=FilterManager, ID=3, Description="Filter Manager failed to attach to volume '\Device\Harddisk3\DR6'. This volume will be unavailable for filtering until a reboot. The final status was 0xC03A001C."
- System, warning, Source=Disk, ID=51, Description="An error was detected on device \Device\Harddisk3\DR6 during a paging operation."


I also disabled UAC, logged off and on again, but the problem is still the same.

__________________
Pieter Demeulemeester
0
Pieter

Avatar / Picture

Senior Member
Registered:
Posts: 216
Reply with quote  #6 
I see the following in the Event Viewer.

When mounting (doubleclick) the VHDX :
- System, Information, Source=NTFS, ID=98, description="Volume G: (\Device\HarddiskVolume12) is healthy. No action is needed."

When unmounting (eject) the VHDX :
- System, error, Source=FilterManager, ID=3, Description="Filter Manager failed to attach to volume '\Device\Harddisk3\DR6'. This volume will be unavailable for filtering until a reboot. The final status was 0xC03A001C."
- System, warning, Source=Disk, ID=51, Description="An error was detected on device \Device\Harddisk3\DR6 during a paging operation."


I also disabled UAC, logged off and on again, but the problem is still the same.

__________________
Pieter Demeulemeester
0
Donato

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 18
Reply with quote  #7 
Quote:
With local admin I can access the UPD, but that's a weird work around.

I used to use that work around in similar situations. For some reason, windows sees the local admin as a higher account than the domain admin. I have no idea why.
0
Pieter

Avatar / Picture

Senior Member
Registered:
Posts: 216
Reply with quote  #8 
Given my RDS environment isn't in production yet, I tried something:

I mounted the file "UVHD-template.vhdx" (no problem there) and changed the NTFS security inside the mounted VHDX. I added the DOMAIN\Domain Admins group with Full Control rights.
  minasi.jpg    
And was hoping that for each newly created  VHDX file (new logged on account), the security would be Full Control for Domain Admins.

But that turned out different. It seems that the VHDX for a newly logged on user does not inherit the security from the template VHDX.
No luck. Still stuck with the "access is denied" message when I try to mount a User Profile Disk.


__________________
Pieter Demeulemeester
0
Donato

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 18
Reply with quote  #9 
https://www.wintips.org/how-to-fix-disk-event-51-an-error-detected-on-device-during-paging-operation/

There is something on event ID 51. I don't belong to eventid.net If you do, it's a good place to start.
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.