Link to home
Start Free TrialLog in
Avatar of fraserorg
fraserorg

asked on

how to allow non-admin to use mmc to log users off server shared resources

We have a user who manages a specific application that needs to be able and close open sessions out on the server.  So under   I created an MMC to the server Shared Folders for him but he is unable to access the shares unless I assign Admin priviledges.
   Is there a way to allow him only access to the shared folders in mmc rather than the entire server?
Avatar of Lynx28
Lynx28

Grant him the neccessary share permissions to those folders.
Avatar of fraserorg

ASKER

Where would I do that?  Attached is a screen shot of what I am talking about.  The problem we are experiencing is when he click on any one fo teh Shared Folders, he recieves an error saying he does not have permissions.  If I add him as admin he can access them, but that is admin for the server which I would rather not do.
MMC-screenshot.doc
Ensure that he is logged on and is the one using the MMC ... go to each shared folder where ever they may be and ensure he has the neccessary rights to open them ..create a test file does it work?
 You can also browse to the machine from his machine using a UNC path eg: \\computer1
This will show you all the shared folders if he cannot access one go to that machine and check that folder for the correct share permissions by right clicking on the folder and going to properties. The other option is to use a group to specify perms.......
 
 
 
Again, the problem is not necessarily with a particular folder, it is in the MMC console, he can not access "Shared Folders (Solomon) application to view items under Shares, Sessions, and Open Files.
   Does this make sense?
Start>Run type "mmc" add/remove snap in from the file menu. Add the shared folders snap in. Left click on the shared folders snap in > File>  options. What is the console mode set? Try author
Save the console in a location where you and the other user can access. Under your account right click on the new .msc file go to properties and check the security tab. Add the other user there as full control or whatever perms you feel neccessary. The other user should be able to open the newly created .msc.
If they cannot view \modify the shares on the computer you are looking at share(s) permissions not being set or set incorrectly.
 
hmmm still get same error, we can open the folders, we can open the mmc, but when we click on each of the sections: Shares, Sessions, Open Files we recieve the error: The following error occurred while reading the list of shares for Windows clients: Error 5: Access is denied.

The user has full control of the folder and the mmc is set for author mode.  Only users listed as administrators on the network can gain access.

any ideas?
Last Post
 
"Only users listed as administrators on the network can gain access."
Original Post
We have a user who manages a specific application that needs to be able and close open sessions out on the server.  So under   I created an MMC to the server Shared Folders for him but he is unable to access the shares unless I assign Admin priviledges. ***
  Is there a way to allow him only access to the shared folders in mmc rather than the entire server?
 You need to check your permissions for assistance with group permissions go to school and learn about them or look here on microsofts website about them
 
Technet.microsoft.com
 
Sincerely offered solution
 


 
 
 
 
So if I understand you correctly there is not a way to provide a user access to the mmc other than granting them admin privileges to the network?
Avatar of oBdA
Lynx28,
even after several posts, you're still completely missing fraserorg's point, so in my personal opinion, comments like "for assistance with group permissions go to school and learn about them" are somewhat uncalled for.
fraserorg is trying to give a delegated admin the permission to *manage* *open* *files* on a server, *not* to access a share or files in a share in general.

fraserorg,
I'm afraid handling open files requires admin privileges on the machine where the files are stored. This does *not* necessarily mean Domain Administrator privileges, local Administrator privileges on the machine hosting the share will be enough.
Thank you oBdA for your understanind of what we are trying to accomplish.  Being this is a server, are there any other privilege levels that you are aware of that would allow the end user to manage the open files?
ASKER CERTIFIED SOLUTION
Avatar of oBdA
oBdA

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial