This is a bit more complex so here goes:
Firstly - this has worked fine for 2 years without a hitch, but I am struggling to discover what is wrong or what has caused it:
I have a windows 2000 domain with windows 2000 users
My users map a drive in a group policy command file which connects them to an area ona fileserver
This area has an msaccess .mdw worgroup file whch authorises them to use databases etc.
If the user is a domain admin all works fine
If the user is not a domain admin then they still have full access to the share (properties on the share and file show full control). But they cannot use the file (acces denied). So I thought I'd copy the file locally - still access denied - so I thought attach to the default system.mdw on the local disk - still access denied.
This is consistent with all my users (unless I put them into the domain admins group - I have tried administrators/ server operators/ etc - but only works when a domain admin)
We have group policies
I have trolled through them and can find nothing relevent - so I have move some user out from inside the group policy restricted OUs and still no good. So I have disabled all the group policies - still no good.
If anyone can help it would be most appreciated.
Thanks
Chris
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Yeah - but I don't see any policies which could cause the problem.
I have also used gpresult /u which shows me which polices are in effect (and this is how I confirmed that I had turned them off (none showed) - but I still had the problem.
I have just put someon in enterprise admins group and they cannot do anything either - it seems that only domain admins can work?!?!
I can't find any policy which restricts the users in this way.
My users can add and remove files from their desktop, and do most normal things - in fact they can even open and edit the .mdw files (remote, local and default MS file). I also read a question in here which says that if a policy is applied to user then it changes their local policy and if you un-apply it then you need to change the local policy again: - I have tried this and although it smacks of a policy issue, I just can't see it (but then I am not a policy expert)
Chris
Also, I can't understand what has happened to it.
There have been 2 network changes that I know about in the past 2 days:
1. A load of files have been archived
2. One of the policies has been changed to not run a command script (which mapped some drives and changed the clock through net time).
I can't see how either of thes could affect this but I have out the command file back in just in case
Chris
Thanks for all your help guys - this I think was a corruption after all - I have never got to the bottom of it but I do now feel very confident with most aspects of Security and Policies - nobody solved this but thanks for your help so I will allocate the points for the knowledge I have gained.
Chris
Business Accounts
Answer for Membership
by: craylordPosted on 2005-06-16 at 11:57:53ID: 14234356
Have you tried Microsofts Group Policy Management Console? It is much easier to see what is/isn't being applied and seeing all the policies. Much better interface to work with.
http://www.microsoft.com/w