[Windows Server 2012] DAC : Implementing Access-Denied Assistance

Access-denied remediation is a new feature in Windows Server 2012, which provides different ways to troubleshoot issues that are related to access to files and folder.

 

 

I have added an Exchange 2013 server to my lab for this scenario.

So my lab consists now of 4 VM :

• 1 Windows Server 2012 Domain Controller (DAC-SRV-AD01)
• 1 Windows Server 2012 File Server (DAC-SRV-FIC01)
• 1 Windows 8 Client (DAC-WIN8-CLT)
• 1 Windows Server 2012 / Exchange 2013 (DAC-SRV-EXCH)

The configuration of Access-Denied Assistance requires 2 steps:

• Configure Access-Denied Assistance
• Configure the Email Notification Settings

First, I configure the Access-Denied Assistance by using Group Policy.

The first part of the configuration has been done.

Now we'll configure the Email Notification in FSRM.

And that's all. As you can see it's really easy to configure.

Now we can verify that Access-Denied Assistance works.

I log the user Carla Thomas on the client and try accessing the confidential folder.
I don't have access but you can see that you can Request Assistance.

Now I check administrator Emails and you can see that Administrator received the Request Assistance with all informations like the user and device claims.

As you can see Access-Denied Assistance is a really great feature of Dynamic Access Control and is very easy to implement.

For more information check this : http://technet.microsoft.com/en-us/library/hh831788