Solved

Access denied when trying to open newly created local mapped network drive.

Posted on 2007-04-11
24
671 Views
Last Modified: 2008-10-15
I have a Windows 2003 Server R2 standard setup.  When I map a drive on a new account created ON the server it shows that it is mapped, however, when I try to access the mapped drive it says access denied.  However, I can go to the folder locally on the server and access all of the information.  I have to have the drive mapped for the application we are using to work properly.  I have checked the permissions and I am stuck.  I do know that the administrator account maps fine and works properly.  Please advise
0
Comment
Question by:stallings123
  • 11
  • 10
24 Comments
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
You're looking at the security permissions - you need to modify the sharing permissions, which be default in W2k3 is Everyone/Read Only.
Change it to Everyone/Full and you should be all set! :^)
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
From the server - right-click the folder where the share is housed, and choose properties (or sharing and security) and then from the sharing tab, adjust the permissions there to Everyone/Full (or for tighter security, Authenticated Users/Full)
0
 

Author Comment

by:stallings123
Comment Utility
That is already shared that way.
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Can you post the results of the following: (run from the server)

Start->Run->CMD /C Cacls C:\YourFolderName > C:\Cacls.txt && c:\cacls.txt
0
 

Author Comment

by:stallings123
Comment Utility
e:\apps\OMNI7 BUILTIN\Administrators:(OI)(CI)F
              CREATOR OWNER:(OI)(CI)(IO)F
              Everyone:(OI)(CI)F
              NT AUTHORITY\SYSTEM:(OI)(CI)F
              BUILTIN\Users:(CI)(special access:)

                                SYNCHRONIZE
                                FILE_WRITE_DATA
 
              BUILTIN\Users:(CI)(special access:)

                                SYNCHRONIZE
                                FILE_APPEND_DATA
 
              BUILTIN\Users:(OI)(CI)R
0
 

Author Comment

by:stallings123
Comment Utility
e:\ BUILTIN\Administrators:(OI)(CI)F
    CREATOR OWNER:(OI)(CI)(IO)F
    Everyone:(OI)(CI)F
    NT AUTHORITY\SYSTEM:(OI)(CI)F
    BUILTIN\Users:(CI)(IO)(special access:)

                          SYNCHRONIZE
                          FILE_WRITE_DATA
 
    BUILTIN\Users:(CI)(special access:)

                      SYNCHRONIZE
                      FILE_APPEND_DATA
 
    BUILTIN\Users:(OI)(CI)R

0
 

Author Comment

by:stallings123
Comment Utility
e: drive partition is shared then omni7 which is buried within e:\apps shared
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Try unsharing it...use this method if you'd like (from a command prompt)
(and I'd remove "Everyone:F" from the security...

net share Omni /delete
net share Omni=e:\apps\omni

Then right-click the share and double-check Everyone account - it should be set to Read by default - change it to Full.

Next, on the security - open it up and click Advanced on the security tab, checking the 'change permissions on all child objects' as well...
0
 

Author Comment

by:stallings123
Comment Utility
Still did not work.
0
 

Author Comment

by:stallings123
Comment Utility
This is driving us crazy.  We can access all day with the administrator account.  If we make and user member of the administrator group it still does not work.  We tried copying to another folder and recieved the same error.  
0
The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Just a stab in the dark, but can you check tcp filtering?

Start->Run->ncpa.cpl
Right-click your lan, choose properties
Internet Protocol, Properties
Advanced, Options, Properties
Is that enabled and/or set to All?
0
 

Author Comment

by:stallings123
Comment Utility
set to permit all
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Okay, so locally you can access e:\apps\OMNI7 as the administrator 'or' any other account?

But remotely, you can only access \\servername\omni7 as the administrator - that correct?
0
 

Author Comment

by:stallings123
Comment Utility
Yes I think that is it.  If I log in under the administrator account I can access the mapped o: drive which is mapped to e:\apps\omni7 (which omni7 is the shared folder) the executable is netomni.exe which is in a folder called progs e:\apps\omni7\progs.  I can map an o: drive to e:\apps\omni7\progs and run the executable but not if I do it the way the admin account is setup.  With any user that has rmeote access permissions I can map to any folder and access with no problems.  It is only this folder I am having the troubles with.  Also, if I am logged in as one of the remote users(not administrator account) I can run the program from a shortcut directly to the e: drive just not if it is mapped to the o:
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Wait...are you mapping it to omni like this:

net use o: \\servername\e$\apps\omni7 ??
0
 

Author Comment

by:stallings123
Comment Utility
there is an e$ administrative share.  I am not using the command line to map the drive.  I am right clicking on the folder.  
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Right - ordinary users won't have access to e$, you'll need to use a share name.

Instead of \\server\e$\apps\omni7
they'll need to use
\\server\omni7
0
 

Author Comment

by:stallings123
Comment Utility
that is what we are doing.  when we map o: to \\ibsldc\omni7 it will show the shared drive in my computer but when you click on it you will get a red x and says access denied.
0
 
LVL 67

Expert Comment

by:sirbounty
Comment Utility
Hmm - tough one to troubleshoot remotely, I'm afraid...
I'll take another peek at this in the morning when my brain is fresh...hopefully we'll get something sorted for you soon!
0
 

Author Comment

by:stallings123
Comment Utility
Did you come up with anything?
0
 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points
Comment Utility
http://support.microsoft.com/kb/310399 details how to turn on auditing (just do it on the server).  Check the security log afterwards (you'll need to enable auditing on that specific folder) and see if you can identify what's actually being restricted (audit both success and failures).

Also - while in the security of that folder, click Advanced - and from the Effective Permissions tab, enter the account that you're testing with - and see what the effective permissions are returning...I can't help but wonder that there's a deny in there somewhere...
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now