?
Solved

Weird permissions issue

Posted on 2011-09-22
6
Medium Priority
?
471 Views
Last Modified: 2012-08-14
I've run into a weird issue that is stumping me. I have a user that needs to be able to write to an excel file on one of our shares. Another user, who has the exact same level of access (as verified by the Effective Permissions utility in Advanced Security) can write and save to the excel file, but when this user tries to do so it returns "Access Denied." I've verified that his user is a member of the group, I've verified that his login is being viewed as a member of the group, I've verified that there are no Deny permissions set. I've also verified that neither user is an Owner of the file. Has anyone run into this kind of issue before? It's confusing me because everything I'm seeing shows that he should have permission to save the file, but he can't, meanwhile another user that is a member of the exact same groups *can*.
0
Comment
Question by:Adam Brown
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 36584423
Have you checked the NTFS permissions and SHARE permissions ?
0
 
LVL 42

Author Comment

by:Adam Brown
ID: 36584525
Yes. As I said, another user with the exact same levels of permissions is able to save to the file. Same groups, same everything on both users.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 36584537
But have you checked BOTH the SHARE and NTFS Permissions for any exceptions or denys.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 42

Expert Comment

by:dlmille
ID: 36585726
I've had this problem recently with my WHS 2011 version (SBS 2008 R2 base).  I got it as a result of a hard disk restore, for some reason, and the user couldn't access the shared drive.  However, once I rebooted the machine, permissions seemed to work properly.

I'm stretching here, but has the machine with access denied issues been rebooted and the user logged back in since this started happening?

Dave
0
 
LVL 42

Accepted Solution

by:
Adam Brown earned 0 total points
ID: 36601074
Well, I figured out the issue myself. It's not related to share permissions, but rather to the way that Excel saves files. Excel creates a temp file when you modify a file. When the changes are saved, the original file is deleted and the temp file renamed. In order to do this, the users must have Modify permissions on the folder the file is being saved to. Neither user had this permission. The difference in how things operated for each user was due to the way the problem is handled in Windows XP vs. Windows 7. In Windows XP the whole process occurs and the step that is missing access fails, so the user that could save was creating a lot of temp files and (I guess) the system was merging those changes into the original instead of deleting it. Windows 7, on the other hand, appears to block the ability to save outright if any part fails. Allowing Modify permissions caused both users to be able to save to the file properly without loads of Temp files building up.
0
 
LVL 42

Author Closing Comment

by:Adam Brown
ID: 36895880
Solved myself.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This Micro Tutorial will demonstrate how to use longer labels with horizontal bar charts instead of the vertical column chart.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question