Solved

Access shared folder in another domain

Posted on 2014-04-25
7
496 Views
Last Modified: 2014-04-25
I have a file server (Win 2008 Enterprise R2) in DOMAIN-A which holds a share named SHARE-A.
In DOMAIN-B all the users are located.
There is a Trust relasionship (two-way) between DOMAIN-A and DOMAIN-B.

I have given DOMAIN-B\USER-B Full Controll Permissions to SHARE-A (both NTFS and share permissions).

When USER-B tries to access the share (\\domain-a\share-a) he can se the folder and its contents, but though he has Full Controll permissions, he can't add new files (Destination Folder Access Denied).

What am I doing wrong here?
0
Comment
Question by:Kasper Katzmann
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 

Expert Comment

by:FF-ExEx
ID: 40022494
From what you are descirbing everything looks good and it should work. I would make sure that no other permissions are present at share or folder (NTFS) level espacially no deny permission at NTFS level because this would overwrite every allow permission.
0
 

Author Comment

by:Kasper Katzmann
ID: 40022530
My thoughts exactly.
It's a completely new file server and the only permissions set after installation are those descibed above. There are no deny permissions at all.
0
 

Expert Comment

by:FF-ExEx
ID: 40022556
Ok, since this are two domains you should make sure that this is at least working for users from domain a. Setup the same permissions for a user from domain a and check if this working.

If this is also not working can you post screenshots about the configured permissions?
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 

Author Comment

by:Kasper Katzmann
ID: 40022575
Oops... same problem with a local domain account. Why...? I ask my self...
0
 

Expert Comment

by:FF-ExEx
ID: 40022597
Difficult to help from here without seeing what exactly is set. A few screenshots with the set permissions would help.
0
 
LVL 12

Accepted Solution

by:
Sandeep earned 500 total points
ID: 40022619
If both NTFS and share permissions are defined correctly but still not working?

I would say remove those permissions and add those back. Also while adding make sure you choosing the option to replicate\propogate the change to child objects. So these permissions gets applied in same manner down the line.

See if this works.
0
 

Author Closing Comment

by:Kasper Katzmann
ID: 40023856
Of course, inheritable permissions. So simple that I missed it. Thanks for pointing it out for me.
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question