How to set permissions on server share for remote access via a VPN
Hi,
I have a Windows 2008R2 machine running as a (development only) IIS webserver in a remote location from the office. The web folder is on the E: drive rather than the OS drive and I can access and make changes using Remote Desktop.
I recently setup a VPN and mapped a drive on my Windows 10 Laptop to the wwwroot folder on the server. The problem is that I'm unable to create or edit files or folders on the mapped drive due to insufficient permissions.
I use an administrator's account to log on to the server using RD and the VPN but the permissions don't seem to flow through to the mapped drive. I need some help in setting the correct permissions on the server's share but I am unsure how to do that.
I have a Windows 2008R2 machine running as a (development only) IIS webserver in a remote location from the office. The web folder is on the E: drive rather than the OS drive and I can access and make changes using Remote Desktop.
I recently setup a VPN and mapped a drive on my Windows 10 Laptop to the wwwroot folder on the server. The problem is that I'm unable to create or edit files or folders on the mapped drive due to insufficient permissions.
I use an administrator's account to log on to the server using RD and the VPN but the permissions don't seem to flow through to the mapped drive. I need some help in setting the correct permissions on the server's share but I am unsure how to do that.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
have you tried with another credentials instead of administrator ?
for troubleshooting please add another user in server and give permissions for Dial-in and share/ntfs then try to connect through new user and see what happens ?
is this workgroup env or domain ?
for troubleshooting please add another user in server and give permissions for Dial-in and share/ntfs then try to connect through new user and see what happens ?
is this workgroup env or domain ?
ASKER
There is another account I could use but was not listed in the security tab for wwwroot on the server. When I added it and set to full control I got a warning:
"Remotely setting permissions on the folder at the root of a share removes all inherited permissions from the root folder and all subfolders. To set permissions without removing the inherited permissions, click No and either change the permissions on a child folder or make the change while logged in locally"
I dare not risk making any changes remotely as I have websites and apps that have special permissions (IIS_IUSRS etc) and if I overwrite them my sites will stop functioning.
I did check the dial -in tab for the administrators properties dialog and changed it from "Control access through NPS Network Policy" to "Allow Access" then disconnected the VPN, reconnected and tried again but still unable to edit anything under wwwroot on the mapped drive.
The server is MS 2008 R2 running 5 roles: Application Server, DNS Server, Files Services, Network Policy and Access Services and IIS web server.
"Remotely setting permissions on the folder at the root of a share removes all inherited permissions from the root folder and all subfolders. To set permissions without removing the inherited permissions, click No and either change the permissions on a child folder or make the change while logged in locally"
I dare not risk making any changes remotely as I have websites and apps that have special permissions (IIS_IUSRS etc) and if I overwrite them my sites will stop functioning.
I did check the dial -in tab for the administrators properties dialog and changed it from "Control access through NPS Network Policy" to "Allow Access" then disconnected the VPN, reconnected and tried again but still unable to edit anything under wwwroot on the mapped drive.
The server is MS 2008 R2 running 5 roles: Application Server, DNS Server, Files Services, Network Policy and Access Services and IIS web server.
please don't try any deep procedures remotely on folders or services.
make another folder in another driver and then try the procedures on that folder.
make another folder in another driver and then try the procedures on that folder.
ASKER
All fixed...
I made the error of not specifying the administrator's account when sharing the wwwroot folder on the server. It was set to the default of: "Everyone"
Of course, "Everyone" only have Read permissions!
Once I added the admin account in there it was all go.
Many thanks for your help :-)
I made the error of not specifying the administrator's account when sharing the wwwroot folder on the server. It was set to the default of: "Everyone"
Of course, "Everyone" only have Read permissions!
Once I added the admin account in there it was all go.
Many thanks for your help :-)
thanks for your response.
ASKER
The servers admin account has full permissions on the wwwroot folder, I can edit and add files and folders under wwwroot using RD no problem.
It's when I try and do the same thing on my Windows 10 laptop that I get the permission error.
The laptop is connected to the server via VPN, I've mapped a drive letter to the wwwroot share on the server and it shows up in explorer on my laptop, just can't edit anything yet...