We help IT Professionals succeed at work.

Win7 access mapped drive issue - one PC cannot access particular share

Hi

I have an interesting issue and been pulling my hair out.

Background:
Laptop with Win7 Pro in 2003 Domain was used by user X. User X has left and laptop has now gone to user Y with same access credentials. User Y complained that he can only access 2 out of 3 mapped drives.
Error: 'Access Denied'.
User has 3 mapped drives all mapping via login script with simple 'net use' commands, persistence set to 'No'. Drives are mapped via batch file running the script, no third party app is used.

Original user X profile has been removed from laptop. User Y has local admin rights but not domain admin rights.

Server share is named for example 'share$', share permissions set to 'Everyone>Full access', security locks down access by group membership. No custom global or local policies exist, all is default.

Symptoms:
When user runs script, all 3 drives appear but the affected drive is not showing any properties, on clicking above error appears.
When same user logs on to different PC all is fine.
When Domain Admins log onto laptop same error occurs.
When a new share is created for the same folder, such as share2$ and the login script is altered to reflect this, all is fine.
Manual browsing to the share is possible for domain admins, not for user, again access denied.
Removing the share$ and recreating it with the same name results in the same problem

Summary
So it appears the problem lies with the laptop and how this particular mapping to share$ is handled. I have not tried deleting user Y profile or removing/adding laptop to the domain.

Question:
Any ideas how to get the mapped drive to work on this laptop?

Thanks
capt.
Comment
Watch Question

Commented:
Hi captainreiss,

Have you tried a "clean boot" on the problem notebook?
A clean boot helps eliminate software conflicts.
1.       Click Start, type msconfig in the Start Search box, and then press ENTER. If you are prompted for an administrator password or for a confirmation, type the password, or click Continue.

2.       On the General tab, click Selective Startup.

3.        Under Selective Startup, click to clear the Load Startup Items check box.

4.        Click the Services tab, click to select the Hide All Microsoft Services check box, and then click Disable All.

5.        Click OK.

6.        When you are prompted, click Restart.

Please also disable the anti-virus software in case of any failures. After you have finished troubleshooting, follow these steps to reset the computer to start as usual:

a.       Click Start, type msconfig.exe in the Start Search box, and then press ENTER.

If you are prompted for an administrator password or for confirmation, type your password, or click Continue.

b.      On the General tab, click the Normal Startup option, and then click OK.

c.       When you are prompted to restart the computer, click Restart

HTH
captainTechnical Director

Author

Commented:
Thanks for your comment, but why would it be a software conflict if 2 out of 3 mappings work?

Happy to push buttons but I like to understand the reasons behind it.

capt.
Commented:
Hi captainreiss,

My suggestion was more a shot in the dark. I have had numerous "odd" problems in Win 7. Profiles going corrupt and the built in additional security changing the playing field for in-house web apps. That said, I doubt your problem is a profile problem - the Admin account would have worked if it was only a corrupt Profile. The Clean boot was an attempt to prevent reloading (easy way out). Alternatively what you might be able to do is remove the Notebook from the domain. Within AD reset the computer account and then proceed to re-add it to the domain.

HTH
captainTechnical Director

Author

Commented:
Thanks that means more to me now. As the problem even occurs with the admin account I figured profile is out of the question.

The odd thing is that it only appears for this share name and not for another sharename to the same resource. I thought it must be a security entry somewhere that does not play along...

I will rethink this and try removing the laptop from AD in the morning

thx
capt.
captainTechnical Director

Author

Commented:
I actually noticed that the machine is still running on Teamviewer so will see if I can do this remotely (it is after hours over here now)
captainTechnical Director

Author

Commented:
Ok, I:
removed laptop from AD
removed user from laptop
deleted the computer account from the domain
added the laptop under new DNS name to the AD
added the user with admin privs to the laptop
logged on and...

..the problem is the same...ideas??

Commented:
Morning captainreiss,

Do you by any chance have offline files enabled with this share or on the Laptop?
captainTechnical Director

Author

Commented:
Morning. No offline files at all. And all settings are the same for all the shares as far as Advanced settings are concerned.

Commented:
How are the drives mapped?
Technical Director
Commented:
Update:

This is now fixed. turned out that the user X profile was not deleted but only the user account on the laptop. Once the profile was removed all burst into life.

Why it affected the Admin user I have no idea. Especially as other drives that the User X had no access to mapped fine. Baffling.

Xperta, as per the question ;o)

thx Moomin83
captainTechnical Director

Author

Commented:
Resolved. Profile was not completely resolved. Expert's advice made me rethink approach, hence awarded points.

Commented:
Sorry, missed that bit about being a batch file.  I assume you do not have a 2008 server in your domain that you can install the GP management tool on and then map drives through preferences?

I've found this works much better, especially with Windows 7 (not that this was your issue anyway :) )
captainTechnical Director

Author

Commented:
Sorry, why are you objecting? We don't run 2008, and the problem is solved.

thx for your input, but your comment does not further add to the solution.

cheers
capt.