Solved

UNC Path and Permissions

Posted on 2009-07-15
2
480 Views
Last Modified: 2013-12-04
I wanted to try and get clarification on how UNC paths function. My understanding that when typing a UNC path, for instance to access a server running server 2003 I would use \\server01\share\foldera\folderb that each folder or hop required that you had permissions to move to the next level below.

However recently I ran into a case where a user did not have any rights to foldera but was able to access folderb if the full UNC path was entered. It seems that UNC acts in the same way a share would to bypass folders at higher levels that the user does not have access to. I didn't find any good information online so any help you can provide would be great.
0
Comment
Question by:jhsit
2 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 24862692
That's not only via UNC, that's the normal behavior. This "behavior" is actually a user right, "Bypass traverse checking". This user right is by default given to the Everyone group.
"Access Denied" Error Message When Users Try to Access Shared Folders
http://support.microsoft.com/kb/277644
Bypass traverse checking
http://technet.microsoft.com/en-us/library/cc739389(WS.10).aspx
Permissions for files and folders
http://technet.microsoft.com/en-us/library/cc787794(WS.10).aspx
0
 

Author Closing Comment

by:jhsit
ID: 31603892
Great info, thanks!

0

Featured Post

Gigs: Get Your Project Delivered by an Expert

Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
If you don't know how to downgrade, my instructions below should be helpful.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question