Link to home
Start Free TrialLog in
Avatar of smantz
smantzFlag for United States of America

asked on

Share Permissions and security quirk

I am trying to access a domain network share from a non -domain machine.  To enter the server I must provide credentials of a domain user with permissions on that machine which in this case is the administrator credentials.
I go to the folder but receive access denied.  I add security and permission rights to the folder but am still denied access.
This folder is right under the root (c:\) of the server.
I have another share that is within the program files folder with similar permissions and security rights and have no problem viewing the contents.  I have even added the administrator of the domain to the root drive security with no affect on the outcome.
Is the problem an issue with the actual folder creation?
I know a client machine logged into the domain with proper credentials has no problem however; I have the need time to time to access shares from non domain machines.
Lastly, from a client logged in locally and not on the domain, one can see the security tab for the share that can be opened while the security tab under properties of the inaccessible share isn't even there.
I hope someone has some whiz bang solution (even it is something simple that I am missing.
Thanks
Smantz
SOLUTION
Avatar of sirbounty
sirbounty
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of smantz

ASKER

Well, the run command works great.  Why can't you browse to the folder?  Is it because it is right under the root directory?  Is it better when creating shares to have a folder between the root and the actual data share?  Lastly,
Is the enterprise administration group inherited to domain servers by default?
C$
indicates a hidden share.
You should be able to share out the subfolder if you need to.

net share myshare=c:\folder

You can create shares however it works best for you.

Enterprise admins usually are seperate - they're the top of the top in a domain environment - no other group would/should have the permissions that they do..