Explorer.exe - Access is denied in AD Infrastucture


  • Hi,

    recently we have had some problems with users of Windows 7x64 Enterprise getting an "Access is denied" error when trying to open Windows Explorer using the taskbar shortcut. Also they seem to have additional networking problems in this cases such as Citrix Receiver is starting but not connecting.

    All clients are members of our Level 2008R2 AD. Problem can be solved by restarting the Client or simply wait for 5-10min until problems with Explorer (and network if occurred) just vanish. No entries in event viewer on client or domain controller. Problems happened on clients with and (for testing) without AntiVirus (TM Oscan).

    Funny fact: Explorer can always be accessed using right click on start -> open windows explorer. Error occurs randomly and not for all users, newer and older installations/hardware, no matter if desktop or laptop, wireless or LAN connected.

    Things we have been trying:

    - checked permissions on explorer.exe

    - checked permission on shortcut folder (%appdata%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar)

    - checked all available event viewer or log files on domain controllers and clients

    - uninstalled AntiVirus

    - uninstalled CCM Client (thought it might be a problem with to be applied Windows Updates on client start up)

    - created new local user profile

    Best guesses we still have so far is that whether it is a problem with SystemCenter which might be pushing faulty updates (no logs on Server or clients showed any hints),  OR adding a 2016 DomainController caused problems (since it seems to be a permission issue only for domain users, local users (like administrator) do not have these problems, AD Users set as local admins still have these problems).

    Reinstalling the clients is not an option since more than 50 clients seems to be involved.

    Wednesday, August 30, 2017 12:47 PM

All replies

  • Hi,

    The link of "Windows 7: Can't open Windows Explorer/Control Panel for domain user" may help you solve the problem.

    • Edited by BEE-F Saturday, September 2, 2017 4:11 PM
    • Proposed as answer by Vera Hu Tuesday, September 12, 2017 1:46 PM
    Thursday, August 31, 2017 4:39 PM