none
Is it possible to grant permissions for closing locked files without local admin rights?

    Question

  • Based on the next article: https://technet.microsoft.com/en-us/library/cc732037.aspx

    Which level of permissions I need to close locked file?

    Is it possible to grant permissions for closing locked files without local admin rights?

    Thank you.


    Tuesday, October 06, 2015 1:43 PM

Answers

  • > Is it possible to grant permissions for closing locked files without
    > local admin rights?
     
    No.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by Roman Sirotkin Friday, October 09, 2015 12:07 PM
    Tuesday, October 06, 2015 1:56 PM
  • Hi Roman Sirotkin,

    You need to provide local admin membership on the server since you are forcing to terminate any user access to the files. The documentation for the Windows API that is used to get open file information (NetFileEnum) states that only members of the local Administrators group or the local Server Operators group are allowed to request this information.

    https://msdn.microsoft.com/en-us/library/bb525378(v=VS.85).aspx

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Roman Sirotkin Friday, October 09, 2015 12:07 PM
    Wednesday, October 07, 2015 6:09 AM
    Moderator

All replies

  • > Is it possible to grant permissions for closing locked files without
    > local admin rights?
     
    No.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by Roman Sirotkin Friday, October 09, 2015 12:07 PM
    Tuesday, October 06, 2015 1:56 PM
  • Hi Roman Sirotkin,

    You need to provide local admin membership on the server since you are forcing to terminate any user access to the files. The documentation for the Windows API that is used to get open file information (NetFileEnum) states that only members of the local Administrators group or the local Server Operators group are allowed to request this information.

    https://msdn.microsoft.com/en-us/library/bb525378(v=VS.85).aspx

    Best Regards,

    Mary Dong


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Roman Sirotkin Friday, October 09, 2015 12:07 PM
    Wednesday, October 07, 2015 6:09 AM
    Moderator