New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docker for Windows - Access Denied #868

Closed
hmarcelodn opened this Issue Jun 29, 2017 · 13 comments

Comments

Projects
None yet
@hmarcelodn
Copy link

hmarcelodn commented Jun 29, 2017

Expected behavior

Start Docker Daemon

Actual behavior

I am receiving a message saying:

You are not allowed to use Docker . You must be in the "docker-users" group.

Information

  • SO: Windows 10 Pro
  • Docker Version: Docker version 17.06.0-ce, build 02c1d87

Steps to reproduce the behavior

  1. Install Docker
  2. Open Docker for Windows
@jasonbivins

This comment has been minimized.

Copy link

jasonbivins commented Jun 29, 2017

Hi @hmarcelodn
Have you restarted your machine after installing docker? There were some security changes in the new version, and you might need to log off or restart for the to take effect.

@Surgeonito

This comment has been minimized.

Copy link

Surgeonito commented Jul 3, 2017

Same here.

Docker version: 17.06.0-ce-win18 (12627)
OS: Win 10Pro

One note more: when I launch Docker for Windows as Administrator - all is up and running, but I lost settings as if I was running for a new user.

@Surgeonito

This comment has been minimized.

Copy link

Surgeonito commented Jul 3, 2017

Got that finally working. Just add yourself to 'docker-users' group in Computer management.

@hmarcelodn

This comment has been minimized.

Copy link
Author

hmarcelodn commented Jul 3, 2017

Same.

Thanks!

@hmarcelodn hmarcelodn closed this Jul 3, 2017

@salasxjl

This comment has been minimized.

Copy link

salasxjl commented Aug 1, 2017

My ID was already in the 'docker-users' group but there is a note there on the Computer management tool saying that I need to log in again in order to take effect,

I am going to log off and try again,

@imransdq

This comment has been minimized.

Copy link

imransdq commented Dec 17, 2017

You need to add your logon account to Windows group, docker-users. Docker for Window will create this group automatically when docker for Windows is installed.

Steps:

  1. Logon to Windows as Administrator
  2. Go to Windows Administrator Tools
  3. Look for Windows Computer Management and click on it.
  4. Or you can skip steps 1, right mouse clicking Computer Management, go to more, and select run as administrator and provide Administrator password.
  5. Double click docker-users group and add your account as member.
  6. Also add your account to Hyper-V Administrator. This was added when you installed docker for Windows.
  7. Log off from Windows and log back on.
  8. Click on Windows icon on bottom left and start Docker for Windows. This will start docker windows service.
    9 Start Windows Powershell and type docker --version. It will show Docker version 17.09.1-ce, build 19e2cf6. This is the latest version.

You are good to go. Now just follow docker getting started to configure docker daemon.

@jregeimbal

This comment has been minimized.

Copy link

jregeimbal commented Jan 14, 2018

I just ran into this while trying to upgrade to 17.12.0-ce-win47. That's what I get for clicking the nice pretty upgrade button. Now, my user is already in the docker-users group. Yet, I can't delete the Docker folder.. quite maddening. Time to dig through Windows security BS to get this fixed.

Access to the path 'C:\Program Files\Docker\Docker\Bugsnag.dll' is denied.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)
   at LightweightInstaller.UnpackArtifactsStep.<DoAsync>d__23.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LightweightInstaller.InstallWorkflow.<HandleD4WPackage>d__19.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at LightweightInstaller.InstallWorkflow.<ProcessAsync>d__18.MoveNext()
@garyfeng

This comment has been minimized.

Copy link

garyfeng commented Jan 27, 2018

same issue with 17.12.0-ce-win47. Resolved following @imransdq above; turns out that I was not in the Hyper-V Administrator group

@liquidboy

This comment has been minimized.

Copy link

liquidboy commented Feb 2, 2018

i've got into this situation many times .. such BS ... also got into jregemibal's situation and had a folder that was undeletable (needed to go into startup mode console and delete the folder)..

@MrHinsh

This comment has been minimized.

Copy link

MrHinsh commented Apr 20, 2018

OK, so I am unable to add my user account to the "docker-users" group as it does not exist. I have an Azure AD joined machine.

image

I have run
C:\WINDOWS\system32>net localgroup docker-users AzureAD\MartinHinshelwoodnkd /add
The command completed successfully.

But this did not work...

image

I can confirm that my account is in the "docker-users" group, but I get the same Access Denied message. Also with elevation.

@khteh

This comment has been minimized.

Copy link

khteh commented Jul 21, 2018

Docker version 18.03.1-ce, build 9ee9f40 still has the issue. All users are added to docker-users group!!!

@khteh

This comment has been minimized.

Copy link

khteh commented Jul 23, 2018

Resolved. I must login to active directory and add myself into docker-users group. I was using local account and that's why it failed.

@owlSpeed

This comment has been minimized.

Copy link

owlSpeed commented Jul 25, 2018

I tried adding both myself and Admin to Active Directory, still receiving:
'You are not allowed to use Docker . You must be in the "docker-users" group.'
Also receiving:
'error during connect: Get http://%2F%2F.%2Fpipe%2Fdocker_engine/v1.38/version: open //./pipe/docker_engine: The system cannot find the file specified. In the default daemon configuration on Windows, the docker client must be run elevated to connect. This error may also indicate that the docker daemon is not running.' even when running PS in elevated...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment