1

Hello
I’m connected to the file server with my domain admin login and i want to restore a file from shadow copy when i try i get no permission to do so
what is wrong with this ?
Thanks

1 Spice up
2
  1. Check NTFS Permissions

Even if you are a Domain Admin, NTFS permissions still apply(yeah even admin don’t have explicit direct access to everything). If your account does not have Full Control over the file/folder, you may not be able to restore it.

Right-click the parent folder > Properties > Security tab and check if your account or the Administrators group has Full Control.
If needed, take ownership: (carefull with that one it can break it....Last resort please)
    Right-click the folder > Properties > Security tab > Advanced.
    Change Owner to your admin account or Administrators group.
    Apply and then grant yourself Full Control.
  1. Check Share Permissions (if accessing via a UNC path) (bad habit when trying to do some VSS work)

If you’re accessing the file via \server\share, share-level permissions could be blocking you.

Right-click the shared folder > Properties > Sharing tab > Advanced Sharing > Permissions.
Ensure the Administrators group has Full Control.
  1. Run Windows Explorer as Administrator

Even as Domain Admin, UAC might restrict you(rare but it happens). Try running Explorer as Administrator:
Here is a quick how to :
Press Win + R, type explorer, and press Ctrl + Shift + Enter to launch it with elevated privileges.

  1. Check Shadow Copy Settings

If Shadow Copy is enabled, but files cannot be restored, check the VSS configuration:

Run vssadmin list shadows in Command Prompt (Admin) to check if snapshots exist.
If the snapshot is missing, you might need to configure Shadow Copies correctly.
  1. Try Restoring via PowerShell (again please be carefull here)

vssadmin list shadows

Identify the snapshot ID and use:

copy “\?\GLOBALROOT\Device\HarddiskVolumeShadowCopyX\Path\to\file” “C:\restore\file”

(Replace X with the shadow copy number.)

  1. Check Group Policy Restrictions (that would be wierd but possible)

There might be a GPO restriction preventing file restores. Check:

Computer Configuration\Administrative Templates\Windows Components\File Explorer\Previous Versions. check for the Prevent restoring options check if any are enable**

  1. Test with a Different Admin Account (You might have direct restriction pointed to your own account)

If other Domain Admins can restore but you cannot, your account might have specific restrictions.

3

hello Again
it’s a Windows server 2022 sorry i forgot to mention.

Thanks

1 Spice up
4

hello
i dont see this :slight_smile: gpedit.msc > Computer Configuration > Administrative Templates > System > Shadow Copies.

5

Please recheck my answer I have corrected the error . I am sorry… I am also slow on answer since I have hit the limit on how many reply I can post…

6

hello in computer configuration i don’t have the system\shadow copies

7

Computer Configuration\Administrative Templates\Windows Components\File Explorer\Previous Versions***

and check if there is any ** prevent option ** enabled

image
image1232×372 30.4 KB
8

What type of server?

Have you tried local admin?

What is the full error, you’ve only said you get no permissions.

9

Can you “copy” the said file to another location like the Domain Admin’s desktop ?
Coz the Domain Admin may not have NTSF write permissions to the said file location, may not have NTFS rights to the file or the file in the location might be in use ?

10

hello
yes i can copy it on my desktop let say
Thanks