Access denied to network share for all users on a specific client machine only

Posted on 2012-09-18
Last Modified: 2012-09-22
Hi all,

I have a single Windows 7 Pro 32b laptop being denied access to a specific share on a specific SBS server.

If any authenticated domain user account (including members of Domain Admins) attempts to access this specific network share from the device, they get the "You do not have permissions to access this share, please contact network admin" etc error.

All other shares on the server are accessible from this laptop and the problem share is accessible from any other computer on the domain.

I have:

1) gone through the permissions with a fine tooth-comb (Share permissions set to "everyone: Full control" and NTFS set to "Domain Users: Modify") as well as sharing/unsharing the folder, adding "Everyone: full control" to the NTFS permissions. Checking the "Effective permissions" for any given user seems to check out fine.

2) Removed and re-added the client machine to the domain

3) Checked for cached local machine passwords for the share/specific users

4) Checked for any GPs or other controls which may be denying access to a given resource for a given machine - can't find anything!

and I still can't fathom this one out!

Any ideas
Question by:Iain_Parity
    LVL 9

    Expert Comment

    When I get stumped like this I will often try downloading and running ComboFix.

    Often there is some malware causing the craziness.

    Author Comment

    Hi Tom,

    I have already run Malware Bytes and the machine has an active, current version of ESET NOD32 as well, but I will certainly give this a go...I am running out of ideas!

    Additional info for this issue:

    1) It is interesting to note that trying to browse or map to this share doesn't prompt for authentication as it would/does for other shares to which a logged on account doesn't have permissions - it just defaults to "You do not have access"

    2) I have tried net use /delete * to clear down any residual connections to the share - it does clear down but makes no difference to the issue

    3) The only other thing that stands out as slightly different/odd about this share is that, when you look at the "Sharing" tab from the folder in Explorer, the top "Share" option is greyed out, but the "ADvanced share" options are available???

    LVL 76

    Accepted Solution

    Check the server where the share is for stale sessions.  The issue could be in the sync/offline caching database.

    Double check to make sure there are no unsynchronized files.

    The issue often applies to one user rather than to every user.
    See whether the issue is limited to accessing \\server\sharename where  \\ipaddress\sharename works.

    The other issue could be that the shares are persistently mapped, and this is a replacement server where the credentials do not match and access is denied.  You could use GPO login script to detach net use <driveletter>: /delete
    net use <driveletter>: \\server\sharename
    And see if that corrects the issue.

    Resetting netcache/disabling offline access might be another way to fix.

    Using sysinternals process monitor
    You could try using the tool while you try to access the share.

    Author Comment

    Hi Arnold,

    Thanks for the response - you put me on the right track to finally solve this one!

    It was something in the local offline folders/files DB causing the issues.

    I turned off off-line folders and restarted - the problem went away.

    If I turned it back on again, the problem returned.

    Finally I forced a reset/trash of the off-line DB using the regkey method here which solved the issue and allowed me to turn Off-line folders back on.

    Thanks all.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
    Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now