Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Weird permissions issue

Posted on 2011-09-22
6
Medium Priority
?
477 Views
Last Modified: 2012-08-14
I've run into a weird issue that is stumping me. I have a user that needs to be able to write to an excel file on one of our shares. Another user, who has the exact same level of access (as verified by the Effective Permissions utility in Advanced Security) can write and save to the excel file, but when this user tries to do so it returns "Access Denied." I've verified that his user is a member of the group, I've verified that his login is being viewed as a member of the group, I've verified that there are no Deny permissions set. I've also verified that neither user is an Owner of the file. Has anyone run into this kind of issue before? It's confusing me because everything I'm seeing shows that he should have permission to save the file, but he can't, meanwhile another user that is a member of the exact same groups *can*.
0
Comment
Question by:Adam Brown
  • 3
  • 2
6 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 36584423
Have you checked the NTFS permissions and SHARE permissions ?
0
 
LVL 44

Author Comment

by:Adam Brown
ID: 36584525
Yes. As I said, another user with the exact same levels of permissions is able to save to the file. Same groups, same everything on both users.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 36584537
But have you checked BOTH the SHARE and NTFS Permissions for any exceptions or denys.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
LVL 42

Expert Comment

by:dlmille
ID: 36585726
I've had this problem recently with my WHS 2011 version (SBS 2008 R2 base).  I got it as a result of a hard disk restore, for some reason, and the user couldn't access the shared drive.  However, once I rebooted the machine, permissions seemed to work properly.

I'm stretching here, but has the machine with access denied issues been rebooted and the user logged back in since this started happening?

Dave
0
 
LVL 44

Accepted Solution

by:
Adam Brown earned 0 total points
ID: 36601074
Well, I figured out the issue myself. It's not related to share permissions, but rather to the way that Excel saves files. Excel creates a temp file when you modify a file. When the changes are saved, the original file is deleted and the temp file renamed. In order to do this, the users must have Modify permissions on the folder the file is being saved to. Neither user had this permission. The difference in how things operated for each user was due to the way the problem is handled in Windows XP vs. Windows 7. In Windows XP the whole process occurs and the step that is missing access fails, so the user that could save was creating a lot of temp files and (I guess) the system was merging those changes into the original instead of deleting it. Windows 7, on the other hand, appears to block the ability to save outright if any part fails. Allowing Modify permissions caused both users to be able to save to the file properly without loads of Temp files building up.
0
 
LVL 44

Author Closing Comment

by:Adam Brown
ID: 36895880
Solved myself.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This Micro Tutorial will demonstrate how to use a scrolling table in Microsoft Excel using the INDEX function.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question