Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

File/Directory Access Problem

Status
Not open for further replies.

iolair

IS-IT--Management
Oct 28, 2002
965
US
Hello,
I have a W2K8 Standard Server running SP2. I have a file/directory access problem. There are two shares, one that is used by everyone to share/transfer files, one being setup as a private directory for an individual. All share permissions and NTFS permissions are the same, except the shared directory lets everyone access it, while the private one only lets user "dbrown" access it. When dbrown logs in over the network, files can not be created or modified in that folder. When dbrown logs into the server, and inserts either a CD or USB flash drive, files can be copied, created, and modified. I have looked at GPO - but can not find anywhere an item that says something like "allow user to copy files from console, but not over the wires". This server is a domain controller. One final thought - just for fun, I allowed everyone access to the dbrown folder, but still, no one could create or modify a file in it. Any ideas as to why one folder would allow access while another would not? I looked, and the effective permissions were the same. I must be barking up the wrong tree with permissions, and probably with GPO as well. GPO is at the default settings - I have changed nothing on it since installation. Is there a Microsoft default that disallows network file access? Sorry to be such a dummy. Thanks.

Iolair MacWalter
Network Engineer
 
Make sure the private one has Everyone Full access on the share permission.

On the NTFS remove everyone except yourself and him and give him access to modify.

When he logs onto the server he is not accessing the share just the folder that's why it works.


MCITP:EA/SA, MCSE, MCSA, MCDBA, MCTS, MCP+I, MCP
 
Thanks. Do I need to reboot? Or will it work on the fly?

Iolair MacWalter
Network Engineer
 
will work on the fly?

MCITP:EA/SA, MCSE, MCSA, MCDBA, MCTS, MCP+I, MCP
 
An important update - the workstation I was using to test this had some malware on it. It eventually destroyed the whole TCP/IP stack, but it took a while. Once I tested this on a non-infected machine, it worked fine. I hadn't thought of that before, but you can bet it'll be in my sys admin documentation from now on.

Iolair MacWalter
Network Engineer
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top