Microsoft KB Archive/828830

= You receive an error message when you try to save a Network Monitor capture file to a location that is different from the default folder =

PSS ID Number: 828830

Article Last Modified on 1/9/2004

-

The information in this article applies to:


 * Microsoft Windows Server 2003, Datacenter Edition
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Standard Edition
 * Microsoft Windows Server 2003, Web Edition

-





SYMPTOMS
When you try to save a Microsoft Network Monitor capture file to a location that is different from the default My Captures folder, you receive the following error message:

You cannot access ' :\ '. This is because Network Monitor is running with reduced access in which administrator privileges have been removed.

To gain access, add your user name ' ' to the permissions list of this file or folder.

You receive this error message even if you are logged on as a member of the local Administrators group.



CAUSE
This behavior occurs because the Network Monitor (Netmon.exe) process no longer runs by using administrator credentials in Microsoft Windows Server 2003. By not running with administrator credentials, the risk of damage is reduced if the Netmon.exe process is compromised.



RESOLUTION
To resolve this behavior, give your user account explicit permissions to the folder that you want to save the Network Monitor capture file to.



STATUS
This behavior is by design.



MORE INFORMATION
For additional information about capturing network traffic with Network Monitor, click the following article number to view the article in the Microsoft Knowledge Base:

812953 How to use Network Monitor to capture network traffic

Keywords: kbprb KB828830

Technology: kbWinServ2003Data kbWinServ2003DataSearch kbWinServ2003Ent kbWinServ2003EntSearch kbWinServ2003Search kbWinServ2003St kbWinServ2003Web

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.