Networks

Ask something
Discussion Locked

Access Denied/User rights/share problem

0 helpful
11 replies

by johnnyextreme 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
On a Win2K server I made a shared folder, and gave a user Change and Read permisions for the share. On NTFS permissions I gave her all permissions but Full Control (under Advanced this appears as Modify), and I checked 'Reset permissions on all child objects and enable propagation of inheritable permissions.' On the Domain Controller I resynchronized the domain. The user rebooted and was unable to access the share, receiving a "Blah is not accessible. Access is Denied" dialog box on her NT 4 workstation, which is part of the same domain as the Win2K server. However, if she logs on to a Win2K machine nearby she is able to access the share, and if she logs on to another NT 4 workstation that belongs to a trusted/trusting domain she is also able to access the share. Why can't she access the share?

11 replies

by johnnyextreme

If she logs on to a Win2K machine nearby she is able to access the share, and if she logs on to another NT 4 workstation that belongs to a trusted/trusting domain she is also able to access the share. Why can't she access the share from her computer?

by johnnyextreme

Generally you should NEVER give Full Control permissions to any users but Administrator, but even with Full Control permissions on the share she is still unable to access the share from her computer - only from other machines.

by gigelul

Generally Full control (Full access for Domain users to a share, not everyone) did not mean nothing if you have the correct NTFS permissions on that share folder.
In this way is more easy to manage the permissions for subfolders and in future to make other changes.

Maybe if you will re-authenticate that workstation in domain will solve the issue.

by johnnyextreme

Thank you for your suggestion, but the workstation has been rebooted a few times since the permissions for the user were set on the share, and during logon the computer is authenticated in the domain. The share has Full Control for the Domain Users group. There are no "Deny" flags set under Share Permissions or File Security. I'm willing to try more experiments if you'll suggest something.

by johnnyextreme

To be more precise, I did not directly give this user permissions on the share, I made her a part of a domain global group that is part of a local group that has these permissions on the share - Full Control, and on NTFS - Modify. Other members of the global group have no problem. This is only a problem on this one workstation. Things I will try:
Log on to this workstation as another member of that group and see if access is denied. If so..
Log on to this workstation as a domain admin and see if access is denied. If so...
Remove this workstation from the domain, then add it back to the domain, and see if access is denied. If so...
get out shotgun and dispose of the workstation.

by johnnyextreme

All logons are onto the domain, not to the local computer. The exception would be when I remove this computer from the domain I will have to log on local in order to add it back to domain.

This discussion is closed to new replies.