Solved

Weird permissions issue

Posted on 2011-09-22
6
468 Views
Last Modified: 2012-08-14
I've run into a weird issue that is stumping me. I have a user that needs to be able to write to an excel file on one of our shares. Another user, who has the exact same level of access (as verified by the Effective Permissions utility in Advanced Security) can write and save to the excel file, but when this user tries to do so it returns "Access Denied." I've verified that his user is a member of the group, I've verified that his login is being viewed as a member of the group, I've verified that there are no Deny permissions set. I've also verified that neither user is an Owner of the file. Has anyone run into this kind of issue before? It's confusing me because everything I'm seeing shows that he should have permission to save the file, but he can't, meanwhile another user that is a member of the exact same groups *can*.
0
Comment
Question by:Adam Brown
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 36584423
Have you checked the NTFS permissions and SHARE permissions ?
0
 
LVL 41

Author Comment

by:Adam Brown
ID: 36584525
Yes. As I said, another user with the exact same levels of permissions is able to save to the file. Same groups, same everything on both users.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 36584537
But have you checked BOTH the SHARE and NTFS Permissions for any exceptions or denys.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 42

Expert Comment

by:dlmille
ID: 36585726
I've had this problem recently with my WHS 2011 version (SBS 2008 R2 base).  I got it as a result of a hard disk restore, for some reason, and the user couldn't access the shared drive.  However, once I rebooted the machine, permissions seemed to work properly.

I'm stretching here, but has the machine with access denied issues been rebooted and the user logged back in since this started happening?

Dave
0
 
LVL 41

Accepted Solution

by:
Adam Brown earned 0 total points
ID: 36601074
Well, I figured out the issue myself. It's not related to share permissions, but rather to the way that Excel saves files. Excel creates a temp file when you modify a file. When the changes are saved, the original file is deleted and the temp file renamed. In order to do this, the users must have Modify permissions on the folder the file is being saved to. Neither user had this permission. The difference in how things operated for each user was due to the way the problem is handled in Windows XP vs. Windows 7. In Windows XP the whole process occurs and the step that is missing access fails, so the user that could save was creating a lot of temp files and (I guess) the system was merging those changes into the original instead of deleting it. Windows 7, on the other hand, appears to block the ability to save outright if any part fails. Allowing Modify permissions caused both users to be able to save to the file properly without loads of Temp files building up.
0
 
LVL 41

Author Closing Comment

by:Adam Brown
ID: 36895880
Solved myself.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Here's a look at newsworthy articles and community happenings during the last month.
This Micro Tutorial will demonstrate how to create pivot charts out of a data set. I also added a drop-down menu which allows to choose from different categories in the data set and the chart will automatically update.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question