Solved

File Permission issues

Posted on 2013-02-06
3
346 Views
Last Modified: 2013-04-11
I think either my desktops or servers are caching access denied for network shares, and when permissions are granted, its not rechecking.  heres a little setup of the type of issue im having:
(Windows enviroment, servers either 2003 or 2008R2, clients either XP or 7)

**setup:
file server name: FS01
FS01 is a member of domain: domain.local
FS01 has a file share named: NetFolder (share permission is everyone full, access based on NTFS permissions)

then i have a user named USR1 on a workstation named WS01, also in domain.local
then i have a user named USR2 on a workstation named WS02, also in domain.local

**Scenerio:
neither USR1 or USR2 have permissions to the NetFolder
USR1 tries to access \\FS01\NetFolder and gets an Access Denied error (correct)
USR2 does nothing
As admin: i go to server and grant both USR1 and USR2 full permissions to the NetFolder
USR2 (who has not tried to access share before) has no problems accessing \\FS01\NetFolder
USR1 however, can not access \\FS01\NetFolder; even though "effective Permissions" shows full access.  
Odd twist here: USR1 is able to access the NetShare through a diffrent name:  \\FS01.domain.local\NetFolder


Any ideas here?  and let me know if this off the top of head example made any sence.  I know sometimes odd permission error can happen when offline content is avaliable, I get same issue with allow offline content enabled or not.  Also, when i run SystemInternals ProcessMonitor on the file server, one a user that gets the access dennied error when it should be good, there is no audit from the monitor making me thing the client is cacheing the denied and not even making an attempt to access the files.

thanks,
-steven
0
Comment
Question by:sdmarek
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Andrej Pirman earned 500 total points
ID: 38862382
Hmmm...
I would check (on SERVER side) under shared folder Permissions --> Share tab --> Advanced sharing --> Cache, if maybe caching is set to PERFORMANCE mode, which means, files are cached to client, regardless of whether client did or did not request caching.
Turn this option OFF, either by selecting "Cache only files and folders, which client marks for caching", or "Do not allow caching of this resource".

Wait some 20 minutes for some fancy domain refresh happens, and try again.
0
 
LVL 2

Author Comment

by:sdmarek
ID: 38862411
performace is not checked.  I have the same issues no matter what is checked on this screen.  I have tried both "Cache only files and folders, which client marks for caching", and "Do not allow caching of this resource".
0
 
LVL 2

Author Closing Comment

by:sdmarek
ID: 39072706
Sorry for slow response.

At first i did not think it was a caching problem.  But after rebots on both the client and server after doing the cacheing change, it started to work.  assuming cache was the issue.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Several part series to implement Internet Explorer 11 Enterprise Mode
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now