User is Unable to Create New Folder on Network Drive

I'm helping a friend out with his network setup in his home office. The server is Windows Server 2003 Standard Edition (SP2). Problem is that I have no experience w/ Server 2003. His workstation is running Windows XP Pro. There is a directory on the U drive (labeled 'users on 'Wdp3k01') of the server where he can save and retreive files. However, when he tries to create a new folder anywhere on this directory, he gets the message, "Unable to create the folder 'New Folder.' Access is denied."

When I go to the server and browse the directory using Windows Explorer, I right clicked on his folder, went to properties and clicked on the Security tab. His name is listed there under the Group or User Names. The Permissions are all checked "Allow" except for Special Permissions which is grayed out. I would think that would allow him to do anything to that directory, including creating new folders?

Thanks in advance.
anuneznycAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
BrandonGalderisiCommented:
There are two levels of permissions.  what permissions are on the "users" share on "wdp3k01"?  If the share is set for read-only then you will not be able to write files to it regardless of the NTFS permissions.
0
 
anuneznycAuthor Commented:
He has full permissions on his individual folder (called 'larryw') which is under the U drive ('users on 'Wdp3k01'), but his user name is not listed on the security tab properties for the parent directory ('users on 'Wdp3k01'). Do I need to give him full permissions on the parent directory as well??
0
 
BrandonGalderisiCommented:
No.  You need to check the share permissions on the "USERS" share, not the file system permissions.  That is not something you will be able to see from browsing to it remotely.  You will either need to use "computer management" and remotely connect to the file server or login to that file server directly and view the share permissions through computer management or right clicking the SHARED folder and choosing properties
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
subliferCommented:
When you go to the user's shared folders and look at the properties.  Have you added the user to both the sharing permissions (on the share tab) and the security permissions on the security tab?
0
 
anuneznycAuthor Commented:
I do have physical access to the server. If I go into the File Server Management, I see his folder (called 'larryw') listed under Shares (Local). I right-click & go to Properties.

Under the Security tab, his user name is listed with all permissions checked "Allow" except for 'Special Permissions.'

If I go to the Share Permissions tab his user name is also there w/ 'Full Control', 'Change' and 'Read' all checked off.
0
 
BrandonGalderisiCommented:
Are you talking about a share on "larryw" or the share on the "users" folder that is above "larryw".  If you are using windows home folder redirection, it creates a folder in the redirection location for each user account.  So if the redirection point is d:\users (which is shared as users), then you need to view the share permissions of the d:\users folder and not any share that may exist directly on the d:\users\larryw folder.
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
subliferCommented:
Does he have access to other shares on the server that he can test his permissions on?

This is on an active directory domain, right?
0
 
anuneznycAuthor Commented:
I'm sorry to say that I don't know if this is using AD or not? Is there a simple way to find out?

Also don't know if it is using windows home folder redirection.
0
 
anuneznycAuthor Commented:
Yes, under Administrative Tools there is a listing for Active Directory Users & Computers. So yes, this must be using AD.
0
 
subliferCommented:
You mentioned that this is a home office environment... is the server there also? Are there other users or is it just the one?

I assume he is logged onto the domain.  Have you tried logging off then back on and trying it again?  I had a user a while back that kept losing his kerberos ticket somehow and he would have to log off then back on to get his rights back to the share.  The issue seemed to resolve itself (as far as I know) and may have likely been caused and cured by Windows updates.
0
 
anuneznycAuthor Commented:
Yes, server is also physically here.

Yes, I believe he is logging into the domain and I did try logging off and back on.
0
 
subliferCommented:
If there are no other users that you can test the rights with, can you create a new user in AD, give the new user rights to his folder, log onto his computer as the new user and try to create a new folder.

If his user account was deleted from AD and was recreated, then his user rights on that drive may be linked to the former GUID/SID

Have you tried removing the user from the permissions and security tabs and adding it back?
0
 
anuneznycAuthor Commented:
Thanks BG. There are other users in the AD that I can use to test the rights. I will have physical access to this server again on Saturday afternoon, so I will post my findings at some point on Sat.
0
 
anuneznycAuthor Commented:
Hey Guys. OK, I'm back at the office. I logged in as another user at a different workstations and from there I could create and delete folders on the shared U: drive.  But her Explorer shows the shared drive differently...it is labeled as "irina on 'wdp3k01\users' (U:)" whereas the user that cannot create folders is mapped to a folder labeled "larryw on 'wdp-larry' (U:). And I can't find any folder on the server labeled 'wdp-larry'?? Not sure what to make of this??
0
 
subliferCommented:
The share name on a folder doesn't always correspond to the folder name.

Open computer management on the server (right-click my computer and select "Manage")
   under    System Tools > Shared Folders > Shares     look for the share name and it will show you the correct folder path on the server.  Check the properties on this folder.
0
 
anuneznycAuthor Commented:
Thanks, Sublifer. I will be at the site later today and will check the Shares. Thanks.
0
 
subliferCommented:
Any luck?
0
 
anuneznycAuthor Commented:
OK. You guys are going to love this one. The directory in question was actually mapped back to the user's local C: drive.

So I simply unmapped it and set up a new U: driving, this time pointing to the actual shared drive on the Server.

Well, I made that a lot more complicated than it needed to be!

Thank you very much to both of you for your input!
0
 
anuneznycAuthor Commented:
Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.