Solved

Access Denied when attempting to connect to share via UNC path

Posted on 2009-04-07
2
570 Views
Last Modified: 2013-12-23
I have a share on a Windows 2003 ( server1 ) named sqlback.

The everyone one group has full control over this share.
Administrators, system, sa_SQL2k5 and the group dbrefresh all have full control to the sqlback folder and all sub folders and files.

The user test is a member of the dbrefresh group. Using the effective permissions tab on the 2003 box I can see that the user test has full control over the sqlback folder and all the files in it.

This is the only access that test has to server1.

However, if test tries to access the share using a UNC path, the message "Access is Denied" is displayed.

Looking at the security event log on server1, I can only see sucessfully logins, there are no failure audits that corespond to the access denied (there is also nothing on the workstation I am using to connect to the share).

Additionally, if you look at the Shared Folders snap-in and the Sessions node, I can see that the test user is connected to server1.

Even more interstingly, I can sucessfully map a drive to the share from the command prompt using net use. However, if I then dir the drive, the dir comes back with "File not found".

And now moving into the realm of bizare, I can actually write to share via the mapped drive from the command line.

For example if I do mkdir test the test folder will appear under the share(spotted using explorer on server1), however doing a dir from mapped drive still shows "File Not Found".

Also if I try and browse the mapped drive from explorer I will also get access denied.

I have tried adding the test users directly to the Administrators group on server1, however the problem still persists, so I am thinking there is issues at the share or network work communication level.

I am hoping some of the experts here have any ideas.

We have restricteive GPo which sets all the user rights assignment values, so I am guessing it is something with this that is causing the problem. I will list out all the settings if it is helpful, but I am hoping someone has experienced this before and can narrow it down a bit first!
0
Comment
Question by:d_illicit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 37

Expert Comment

by:bbao
ID: 24190642
it seems that the SHARE level permission has been granted but not the corresponding NTFS permissions. please double check the NTFS permissions of the folder and sub-folders...

hope it helps,
bbao
0
 
LVL 1

Accepted Solution

by:
d_illicit earned 0 total points
ID: 24292545
No it wasn't share level permissions, it was the GPO setting Bypass traverse settings.
The function group needed to be added to this setting to allow proper access to the share.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A brief overview to explain gateways, default gateways and static routes OR NO - you CANNOT have two default gateways on the same server, PC or other Windows-based network device. In simple terms a gateway is formed when a computer such as a serv…
Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question