General discussion

Locked

Access Denied/User rights/share problem

By johnnyextreme ·
On a Win2K server I made a shared folder, and gave a user Change and Read permisions for the share. On NTFS permissions I gave her all permissions but Full Control (under Advanced this appears as Modify), and I checked 'Reset permissions on all child objects and enable propagation of inheritable permissions.' On the Domain Controller I resynchronized the domain. The user rebooted and was unable to access the share, receiving a "Blah is not accessible. Access is Denied" dialog box on her NT 4 workstation, which is part of the same domain as the Win2K server. However, if she logs on to a Win2K machine nearby she is able to access the share, and if she logs on to another NT 4 workstation that belongs to a trusted/trusting domain she is also able to access the share. Why can't she access the share?

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
Thread display: Collapse - | Expand +

All Comments

Collapse -

by Srikrishna In reply to Access Denied/User rights ...

Chk Guest account is enabled/disabled..

Collapse -

by johnnyextreme In reply to

If she logs on to a Win2K machine nearby she is able to access the share, and if she logs on to another NT 4 workstation that belongs to a trusted/trusting domain she is also able to access the share. Why can't she access the share from her computer?

Collapse -

by Gigelul In reply to Access Denied/User rights ...

Generally you must give Full Control for share and Change on NTFS permissions.

Collapse -

by johnnyextreme In reply to

Generally you should NEVER give Full Control permissions to any users but Administrator, but even with Full Control permissions on the share she is still unable to access the share from her computer - only from other machines.

Collapse -

by johnnyextreme In reply to Access Denied/User rights ...

Point value changed by question poster.

Collapse -

by Gigelul In reply to Access Denied/User rights ...

Generally Full control (Full access for Domain users to a share, not everyone) did not mean nothing if you have the correct NTFS permissions on that share folder.
In this way is more easy to manage the permissions for subfolders and in future to make other changes.

Maybe if you will re-authenticate that workstation in domain will solve the issue.

Collapse -

by Gigelul In reply to

She logon local or to domain?

Collapse -

by johnnyextreme In reply to

Thank you for your suggestion, but the workstation has been rebooted a few times since the permissions for the user were set on the share, and during logon the computer is authenticated in the domain. The share has Full Control for the Domain Users group. There are no "Deny" flags set under Share Permissions or File Security. I'm willing to try more experiments if you'll suggest something.

Collapse -

by johnnyextreme In reply to Access Denied/User rights ...

To be more precise, I did not directly give this user permissions on the share, I made her a part of a domain global group that is part of a local group that has these permissions on the share - Full Control, and on NTFS - Modify. Other members of the global group have no problem. This is only a problem on this one workstation. Things I will try:
Log on to this workstation as another member of that group and see if access is denied. If so..
Log on to this workstation as a domain admin and see if access is denied. If so...
Remove this workstation from the domain, then add it back to the domain, and see if access is denied. If so...
get out shotgun and dispose of the workstation.

Collapse -

by johnnyextreme In reply to Access Denied/User rights ...

All logons are onto the domain, not to the local computer. The exception would be when I remove this computer from the domain I will have to log on local in order to add it back to domain.

Back to Networks Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums