Solved

Shared Folders requires users to be added as Admins.

Posted on 2003-10-30
12
190 Views
Last Modified: 2013-12-04
I have created a shared folder on a Win2000Pro machine, and granted Full Access to certain users on the Domain on which this workstation resides.  However, even though those users have been given access to this folder, I find that they cannot access it unless I first add them as Administrators of this machine.  Adding them as anything other than Admins does not work, they get an "insufficient priviledges" error message.  This makes no sense.  What's the point of having shared folder permissions when users have to be fully priviledged Admins anyway?
0
Comment
Question by:beachbt
  • 4
  • 3
  • 2
  • +2
12 Comments
 
LVL 15

Expert Comment

by:Rob Stone
Comment Utility
Is it on a NTFS volume?  If so, check the Security tab.

Also make sure nothing is set to deny in both sharing and security.

You shouldn't have to add them to the local administrators group to access that share.  Did you add a group from the domain or just the user's id?
0
 
LVL 1

Expert Comment

by:Kubrik
Comment Utility
What "filesystem" permissions are set on your shared folder?

Remember that if you grant full "network" access to a user and that user has NO filesystem access permission on that folder , he will never succeed in opening it.

I prefer give full network access and play with filesystem permission.
0
 

Author Comment

by:beachbt
Comment Utility
Not sure exactly what the difference is between "Filesystem" and "Network" access.   I went to the folder in Windows Explorer, right-clicked, selected "Sharing", gave it a name, and clicked on the permissions button.  I then clicked "Add", located the desired users in the appropriate domain, and added them, making sure the correct access permissions were checked.  Yes, this is an NFTS volume.
0
 
LVL 1

Expert Comment

by:Kubrik
Comment Utility
>>  I went to the folder in Windows Explorer, right-clicked, selected "Sharing",

Select Properties, then security and watch userlist.
Which user is listed? and which permission?
0
 
LVL 13

Expert Comment

by:ocon827679
Comment Utility
Sounds like you have conflicting permissions.  You set the share permissions to allow these users access.  What have you set the file permissions to be?  If you have only administrator set to full on the file permissions and no other group(s) identified AND you have administrators and this group of users set to Full on the share permissions, then the users must be in the administrators group.  Remember that when you use Share permissions and File permissions together, then the most restrictive permissions are utilized.  
0
 

Author Comment

by:beachbt
Comment Utility
This is where I am confused.  There are no "File Permissions."  I only set up permissions on the Folder.  The files in this folder change constantly.  Where would I go to set "File Permissions?"
0
Scale it in WD Gold

With up to ten times the workload capacity of desktop drives, WD Gold hard drives employ advanced technology to deliver among the best in reliability, capacity, power efficiency and performance.

 
LVL 13

Accepted Solution

by:
ocon827679 earned 63 total points
Comment Utility
Go to the folder level.  Right-click on the the folder and select Properties.  If you are using NTFS there will be a Security tab.  You will see the file permissions set there.
0
 

Author Comment

by:beachbt
Comment Utility
Kubrik,

>>>  I went to the folder in Windows Explorer, right-clicked, selected "Sharing",
>
>Select Properties, then security and watch userlist.
>Which user is listed? and which permission?

Under Properties/Security, there is only one entity listed.  Everybody.  They have full control.
0
 
LVL 15

Assisted Solution

by:Rob Stone
Rob Stone earned 63 total points
Comment Utility
Try creating another shared folder and see if that has the same affect.  If possible try it on a different volume too.
0
 
LVL 1

Assisted Solution

by:Kubrik
Kubrik earned 62 total points
Comment Utility
0
 
LVL 1

Assisted Solution

by:Pir84free
Pir84free earned 62 total points
Comment Utility
Sure it is Win2kPro ?

It surely sounds like  ocon827679 is right on target.
In order to share correctly, you must evaluate both the sharing permissions along with the security rights for the files or folders.  Windows from 2000 on uses the most restrictive / combination of these rights to determine if a user has which rights to the file or folder.  To determine a users permissions, it takes the most restrictive permissions and a combination of the rights from the user and all of the groups that the user belongs to.

Another point- the folder should have other rights also. Typically, SYSTEM has full control  And the Administrators group should have full control. Maybe your issue is the lack of these rights. Add them and see if it straightens out the directory.

Just a thought.
0
 

Author Comment

by:beachbt
Comment Utility
Though none of the answers has completely resolved this issue, I have split the points amongst all, since the discussion was helpful.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now