Solved

Login Prompt required to access subfolder in Domain User's own Profile

Posted on 2014-02-24
3
252 Views
Last Modified: 2014-03-18
This is so crazy I didn't know what to "name" the request.

I'm working with an end user named:  xxxxuser

In our domain we have redirected (via Group Policy) the "My Documents" folder so that end user's documents get saved to their own profile on our File Server.  Path is:
     \\xxx.local\users\xxxxuser\My Documents

On their client PC, they can save documents, create subfolders, etc.  All changes are saved to their redirected "My Documents" folder on the File Server.  

For xxxxuser access is complete to all "My Documents" folders except one buried subfolder.  Let's call it:  CantOpen.

So, the path to the needed files becomes:
     \\xxx.local\users\xxxxuser\Documents\SubFolder1\Sub2\Sub3\CantOpen.

I've created a shortcut on the desktop of the client PC to the "My Documents" folder that resides on the File Server.  If you drill through that folder to the "CantOpen" folder, you can actually get into the folder and open all the documents contained therein.  This requires several double clicks on the different subfolders to get to the desired file and is cumbersome.  

So, I decided to place a shortcut to the "CantOpen" folder directly on the xxxxuser desktop.   If you double click on it, you don't gain immediate access as expected.  You're presented with a prompt for domain credentials.  This requires entry of the end user's Username and Password.  After entering the correct credentials, you're presented with "Access is Denied".

Now, how is it possible that "CantOpen" is accessible when drilling through the "My Documents" folder, but cannot be opened at all when using the shortcut to the "CantOpen" folder?
0
Comment
Question by:baleman2
3 Comments
 
LVL 20

Accepted Solution

by:
CompProbSolv earned 250 total points
ID: 39884238
Are you sure that the shortcut points to "CantOpen" as accessed through "My Documents" rather than some other share closer to the root?  Windows can give you different rights to the same folder depending on how you get there.
0
 

Author Comment

by:baleman2
ID: 39884286
I just deleted the exiting shortcut to "CantOpen" from the xxxxuser desktop.  

1) Clicked on the "My Documents" shortcut on the xxxxuser desktop and all subfolders are displayed.  
2) Drilled through Sub1, Sub2, Sub3 to reach the "CantOpen" subfolder.  
3) Double clicked on "CantOpen" and all files are displayed.  
4) Opened several of the files.  
5) Went "back" one level and right clicked on the "CantOpen" folder and sent a shortcut to the desktop.  
6) Closed all windows.  The new shortcut to "CantOpen" is on the xxxxuser desktop.
7) Double Clicked on it and was presented with Login window.  
8) Entered Domain Credentials.  Access is Denied.
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 250 total points
ID: 39885583
Hi,

Shortcut_TEST Properties
Can you try this?

Check the "Target location" whether it is pointing to local user\My Documents or redirected  \\xxx.local\users\xxxxuser\My Documents ??

When you click on "Open File Location" do you see a file or "Access Denied"

Keep me posted.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now