C:\Windows\system32\mmc.exe Windows cannot access the specified file. No Permissions

Question

Running Server 2019. It's a Primary DC, DNS, and DHCP for my network.

I was trying to update and my update failed. In trying to resolve that, I now have this new error. When I go to the control panel and try to access the Disk Management snapin, it tells me:

C:\Windows\system32\mmc.exe
Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

If I go to the path directly and run mmc it runs fine. It also does this for C:\Windows\system32\control.exe when trying to change adapter options.

I've run sfc \scannow and it reported no problems. I'm at a loss as to what to do next.

Answer 1

Can you validate that the following policy is set to either Enabled or Disabled

Security Settings / Local Policies / Security Options / User Account Control: Admin Approval Mode for the Built-in Administrator account.

There is a known issue with Windows 2019 as soon as you promote the server to a Domain Controller, this policy is reset to "no value". This cause a lot of issues.

hth

Answer 2

Is there really no other answer than rebuilding my server from scratch!??! That's ridiculous.

You could spend hours or days troubleshooting this issue or even hundreds of dollars in microsoft support calls. Standing up a new domain controller can be done in about 30 minutes, so to me it just doesn't seem worth spending much time on things like this.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Simplest solution may be to stand up a new one for replacement.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new 2019, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

Hi @Rob Muller

Make sure you are an Administrator or you are part of the Domain Admins group if you are in a domain.

Permissions are rules associated with files that determine if you can access the file and what you can do with it. To check the permission of the file or folder, follow these steps:

1. Right-click the file or folder, and then select Properties.
2. Select the Security tab.
3. Under Group or User names, click your name to see the permissions you have.
4. Select Edit, and then select to check the checkboxes for the permissions that you need, and then select OK.

You might get this error if the shortcut or installation is attempting to access a location that is not currently available such as a networked or a removable drive. Check the path of the file that Windows cannot access and make sure that the location is accessible. and also You can also receive this error if the file has been moved or deleted. Browse to the location of the file and make sure the file is in that location.

In some cases, the file may be blocked by Windows. Check the properties of the file, there may be a note saying This file came from another computer and might be blocked to help protect this computer To check for and unblock the file, follow these steps:
Right-click the blocked file and then select Properties.

In the General tab, select Unblock if the option is available.

if the problem persists do follow the below link,

https://support.microsoft.com/en-us/topic/-windows-cannot-access-the-specified-device-path-or-file-error-when-you-try-to-install-update-or-start-a-program-or-file-46361133-47ed-6967-c13e-e75d3cc29657

Hope this answers all your queries, if not please do repost back.
If an Answer is helpful, please click "Accept Answer" and upvote it : )

Answer 5

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--