Solved

Access denied when trying to open newly created local mapped network drive.

Posted on 2007-04-11
24
673 Views
Last Modified: 2008-10-15
I have a Windows 2003 Server R2 standard setup.  When I map a drive on a new account created ON the server it shows that it is mapped, however, when I try to access the mapped drive it says access denied.  However, I can go to the folder locally on the server and access all of the information.  I have to have the drive mapped for the application we are using to work properly.  I have checked the permissions and I am stuck.  I do know that the administrator account maps fine and works properly.  Please advise
0
Comment
Question by:stallings123
  • 11
  • 10
24 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 18890559
You're looking at the security permissions - you need to modify the sharing permissions, which be default in W2k3 is Everyone/Read Only.
Change it to Everyone/Full and you should be all set! :^)
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18890565
From the server - right-click the folder where the share is housed, and choose properties (or sharing and security) and then from the sharing tab, adjust the permissions there to Everyone/Full (or for tighter security, Authenticated Users/Full)
0
 

Author Comment

by:stallings123
ID: 18890634
That is already shared that way.
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 67

Expert Comment

by:sirbounty
ID: 18890656
Can you post the results of the following: (run from the server)

Start->Run->CMD /C Cacls C:\YourFolderName > C:\Cacls.txt && c:\cacls.txt
0
 

Author Comment

by:stallings123
ID: 18890708
e:\apps\OMNI7 BUILTIN\Administrators:(OI)(CI)F
              CREATOR OWNER:(OI)(CI)(IO)F
              Everyone:(OI)(CI)F
              NT AUTHORITY\SYSTEM:(OI)(CI)F
              BUILTIN\Users:(CI)(special access:)

                                SYNCHRONIZE
                                FILE_WRITE_DATA
 
              BUILTIN\Users:(CI)(special access:)

                                SYNCHRONIZE
                                FILE_APPEND_DATA
 
              BUILTIN\Users:(OI)(CI)R
0
 

Author Comment

by:stallings123
ID: 18890719
e:\ BUILTIN\Administrators:(OI)(CI)F
    CREATOR OWNER:(OI)(CI)(IO)F
    Everyone:(OI)(CI)F
    NT AUTHORITY\SYSTEM:(OI)(CI)F
    BUILTIN\Users:(CI)(IO)(special access:)

                          SYNCHRONIZE
                          FILE_WRITE_DATA
 
    BUILTIN\Users:(CI)(special access:)

                      SYNCHRONIZE
                      FILE_APPEND_DATA
 
    BUILTIN\Users:(OI)(CI)R

0
 

Author Comment

by:stallings123
ID: 18890729
e: drive partition is shared then omni7 which is buried within e:\apps shared
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18890772
Try unsharing it...use this method if you'd like (from a command prompt)
(and I'd remove "Everyone:F" from the security...

net share Omni /delete
net share Omni=e:\apps\omni

Then right-click the share and double-check Everyone account - it should be set to Read by default - change it to Full.

Next, on the security - open it up and click Advanced on the security tab, checking the 'change permissions on all child objects' as well...
0
 

Author Comment

by:stallings123
ID: 18894940
Still did not work.
0
 

Author Comment

by:stallings123
ID: 18894943
This is driving us crazy.  We can access all day with the administrator account.  If we make and user member of the administrator group it still does not work.  We tried copying to another folder and recieved the same error.  
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18895432
Just a stab in the dark, but can you check tcp filtering?

Start->Run->ncpa.cpl
Right-click your lan, choose properties
Internet Protocol, Properties
Advanced, Options, Properties
Is that enabled and/or set to All?
0
 

Author Comment

by:stallings123
ID: 18895453
set to permit all
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18895462
Okay, so locally you can access e:\apps\OMNI7 as the administrator 'or' any other account?

But remotely, you can only access \\servername\omni7 as the administrator - that correct?
0
 

Author Comment

by:stallings123
ID: 18895479
Yes I think that is it.  If I log in under the administrator account I can access the mapped o: drive which is mapped to e:\apps\omni7 (which omni7 is the shared folder) the executable is netomni.exe which is in a folder called progs e:\apps\omni7\progs.  I can map an o: drive to e:\apps\omni7\progs and run the executable but not if I do it the way the admin account is setup.  With any user that has rmeote access permissions I can map to any folder and access with no problems.  It is only this folder I am having the troubles with.  Also, if I am logged in as one of the remote users(not administrator account) I can run the program from a shortcut directly to the e: drive just not if it is mapped to the o:
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18895488
Wait...are you mapping it to omni like this:

net use o: \\servername\e$\apps\omni7 ??
0
 

Author Comment

by:stallings123
ID: 18895528
there is an e$ administrative share.  I am not using the command line to map the drive.  I am right clicking on the folder.  
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18895534
Right - ordinary users won't have access to e$, you'll need to use a share name.

Instead of \\server\e$\apps\omni7
they'll need to use
\\server\omni7
0
 

Author Comment

by:stallings123
ID: 18895549
that is what we are doing.  when we map o: to \\ibsldc\omni7 it will show the shared drive in my computer but when you click on it you will get a red x and says access denied.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 18895556
Hmm - tough one to troubleshoot remotely, I'm afraid...
I'll take another peek at this in the morning when my brain is fresh...hopefully we'll get something sorted for you soon!
0
 

Author Comment

by:stallings123
ID: 18902866
Did you come up with anything?
0
 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points
ID: 18904856
http://support.microsoft.com/kb/310399 details how to turn on auditing (just do it on the server).  Check the security log afterwards (you'll need to enable auditing on that specific folder) and see if you can identify what's actually being restricted (audit both success and failures).

Also - while in the security of that folder, click Advanced - and from the Effective Permissions tab, enter the account that you're testing with - and see what the effective permissions are returning...I can't help but wonder that there's a deny in there somewhere...
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know what services you can and cannot, should and should not combine on your server.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question