Have you always wanted to manipulate Windows error messages? Starting with Windows Server 2012, and of course also with Windows Server 2016 there is the possibility to do this. The prerequisite for this is the installation of the File Server Resource Manager, which is available as of Windows Server 2012.
What I’m talking about is this message:
What do you think about this? This looks more sweeter …
As mentioned, make sure your File Server is running Windows Server 2012 or higher. Additionally, make sure the File Server Resource Manager Role is installed. Check it with PowerShell:
Or open the FS Manager with the command
If the FS Resource Manager is not installed, install it with PowerShell:
Install-WindowsFeature -Name FS-Resource-Manager -IncludeManagementTools
Ok, that’s it. Let’s move on with modifying the error messages users get when they are access denied to a file or folder.
Configuring the Access Denied Error Message
There are two ways to accomplish this task. Using the FSRM Manager or using GPO.
Using the FSRM Manager
Open the FSRM Manager. Right click File Server Resource Manager (Local) and select Configure Options.
Click on Access-Denied Assistance and tick the checkbox Enable access-denied assistance. Now modify the message users will get when they are access denied to a file or folder. You can also enable e-mail requests. Make sure your mail server accepts messages from your file server.
Click Ok. Do not test this yet. We have to configure the client computers as well.
On a Domain Controller of your domain open gpmc.msc
Create a new GPO. You’ll find the exact same settings in
Computer Configuration\Policies\Administrative Templates\System\Access-Denied Assistance
Configure the settings that meet your needs and link the GPO to the Organizational Unit of your File Servers.
Configuring the Clients
Create a new GPO Object and enable the setting Enable access-denied assistance for all file types.
In the GPO Object navigate to
Computer Configuration\Policies\Administrative Templates\System\Access-Denied Assistance.
Link this GPO to the OU of the Client Workstations.
Now when a user is access denied to a file within a shared folder, the user get’s the message you’ve configured.
Try to be user-friendly as much as possible. The shown above is a feature for your users. It brings user-friendliness. Remember: If you are good to your users, they are also good to you.
Categories: Windows Server