Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Weird permissions issue

Posted on 2011-09-22
6
Medium Priority
?
475 Views
Last Modified: 2012-08-14
I've run into a weird issue that is stumping me. I have a user that needs to be able to write to an excel file on one of our shares. Another user, who has the exact same level of access (as verified by the Effective Permissions utility in Advanced Security) can write and save to the excel file, but when this user tries to do so it returns "Access Denied." I've verified that his user is a member of the group, I've verified that his login is being viewed as a member of the group, I've verified that there are no Deny permissions set. I've also verified that neither user is an Owner of the file. Has anyone run into this kind of issue before? It's confusing me because everything I'm seeing shows that he should have permission to save the file, but he can't, meanwhile another user that is a member of the exact same groups *can*.
0
Comment
Question by:Adam Brown
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 36584423
Have you checked the NTFS permissions and SHARE permissions ?
0
 
LVL 43

Author Comment

by:Adam Brown
ID: 36584525
Yes. As I said, another user with the exact same levels of permissions is able to save to the file. Same groups, same everything on both users.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 36584537
But have you checked BOTH the SHARE and NTFS Permissions for any exceptions or denys.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
LVL 42

Expert Comment

by:dlmille
ID: 36585726
I've had this problem recently with my WHS 2011 version (SBS 2008 R2 base).  I got it as a result of a hard disk restore, for some reason, and the user couldn't access the shared drive.  However, once I rebooted the machine, permissions seemed to work properly.

I'm stretching here, but has the machine with access denied issues been rebooted and the user logged back in since this started happening?

Dave
0
 
LVL 43

Accepted Solution

by:
Adam Brown earned 0 total points
ID: 36601074
Well, I figured out the issue myself. It's not related to share permissions, but rather to the way that Excel saves files. Excel creates a temp file when you modify a file. When the changes are saved, the original file is deleted and the temp file renamed. In order to do this, the users must have Modify permissions on the folder the file is being saved to. Neither user had this permission. The difference in how things operated for each user was due to the way the problem is handled in Windows XP vs. Windows 7. In Windows XP the whole process occurs and the step that is missing access fails, so the user that could save was creating a lot of temp files and (I guess) the system was merging those changes into the original instead of deleting it. Windows 7, on the other hand, appears to block the ability to save outright if any part fails. Allowing Modify permissions caused both users to be able to save to the file properly without loads of Temp files building up.
0
 
LVL 43

Author Closing Comment

by:Adam Brown
ID: 36895880
Solved myself.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question