Link to home
Start Free TrialLog in
Avatar of ArcJC
ArcJCFlag for United States of America

asked on

Cannot access domain resources from laptop, although VPN functioning

I have a new user on our domain. Computer is part of domain computers. User part of domain users. All remote access has been granted. VPN connects successfully. Email works. Network printers connect successfully. However, cannot connect to shared folders on server. I have reviewed all sharing and permissions on share to make sure there's no explicit denials. She is part of a group that is granted read/write to everything. In some cases even gave her explicit full control. Still can't access network shares. Not sure what I'm missing. Usually when I add a new user the wizard does all this for me and things are fine.
Avatar of getzjd
getzjd
Flag of United States of America image

Are you trying to access the network shares via unc name or IP?   Can she ping by name and IP both?
Avatar of ArcJC

ASKER

we use the sbs vpn to access network resource, and then we just type in directory names in windows explorer. for example: \\fileserver\common. However, when this fails, I can usually browse to network in win explorer, but this user can not traverse domain at all. I can ping by both name and IP. but I cannot traverse in explorer.
What about "\\FileServer'sIP\Common", or "\\FQDN of FileServer\Common"
see that when you use the vnp see in ipconfig /all that your dns servers are your windows domain dns servers if not you need to change the ipsetup so that they use the dns
rgds
Avatar of faolchu
faolchu

i find on our VPN that we need to use IP not host name to connect to resources
dns problem your dns server should be the dns server of you can set is under properties of vpn  network internet-protocol properties dns and give by hand the dns of your domain probably your domain controller
dns problem
your dns server should be the dns server of your domain
you can set this
network
 under properties of vpn  network internet-protocol properties dns and give by hand the dns of your domain probably your domain controller
Avatar of ArcJC

ASKER

I have checked my dns server under IPconfig \all. It is configured correctly, both with and without the VPN in place.

Is there any chance I've done something wrong with shareing and permissions or have somehow denied her? The computer is part of the domain. I gave the user explicit permissions to multiple folders, but I can't get to any of them. How would I check whether the share persmissions are correct or not?
You have verified both the NTFS permissions and the actual share permissions?
Avatar of ArcJC

ASKER

getzjd: I don't know. I went to the server, browsed to the folders in explorer and right clicked on each folder, explicitly giving her full control on both security and sharing. I then also went to the SBS management console where the shares are listed and specifically created a share for her. Later, when I got confused about the difference between these two sharing settings, I deleted the share from the SBS management console. Do I need to add it back in?

See, my own folders are shared for all to see, but I don't have a separate share set up in the mgmt console, so I thought maybe that part wasn't necessary.
Open up explorer, right click on the shared folder, click on properties, click on the sharing tab and check permissions.   Then click on the security tab and verify permissions
Avatar of ArcJC

ASKER

I just reconfirmed permissions all around. The effective permissions tab shows her having access to all of the relevant directories. Are there permissions at the computer level that I need to be looking at?

It's not DNS. She and her computer are part of the domain.

Can she access this share from on the network or on a different computer?  
Avatar of ArcJC

ASKER

It seems to be that computer itself. Works from both other desktops and laptops. What could be on the computer that would cause this?
ASKER CERTIFIED SOLUTION
Avatar of getzjd
getzjd
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ArcJC

ASKER

No, but I will do that tomorrow.
Offline Files in play as well?
can you ping on the name of your server ?
do you see your domain on explore network ? (in the explorer)
is your computer registered in domain (users and computers) ?
try disabling your firewall
Avatar of ArcJC

ASKER

Thank you for your help, getzjd. In the end, I did nothing additional, but the next time we used it in the office (with no intervention or tweaking), it worked find. Thanks for confirming and walking me through the possible issues.