Permissions issues with Windows server 2012 std


We need to transfer files from a laptop (non in domain) to our TS server.

The user has an account configured to have full access to the targeted folder.

The user is able to create/modify the files or folder in the targeted folder but only when connected by RDP on the TS server.

We mounted a network folder to the same folder, but the user is unable to create file/folder in the targeted folder because of a lack of permissions...

I remove all windows auth in the identy manager and reattach the network folder with the option to give another account to auth to this folder and typing exactly the domain account created before but the result was the same, no autorization to create/modify...

We did it before but we never had an issue like that ...

If someone can help us,


Ghalan Team
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David SankovskySenior SysAdminCommented:
Try creating a share on that folder (requires the file server role)
give the user permissions on both NTFS level and share level.
then map the drive as \\servername\sharename
and check.
GhalanTechAuthor Commented:
The user is in a group that has full control (NTFS side) on that specific folder.
We tried to mount directly the folder but it didn't help ...

that's very strange. i don't think the NTFS rights are wrong because the user has the right when having a RDP connection on the TS server.

Maybe the fact that his computer is not on the domain...
Regardless of whether the machine is on the domain, the user should still be able to authenticate using his/her domain credentials.  Most likely, the cause of this issue is that the share is using anonymous or guest rights to access the share.  This happens because of the way Microsoft handles share/admin based access to a system.

In a nutshell, if I am on a non-domain computer, then the first thing that is used as an authentication mechanism on a remote computer is my local user credentials (this is called pass-through authentication).  If those credentials fail to authenticate then the computer that I am attempting to connect to uses Guest/Anonymous credentials to provide access to the IPC$ share.  If those credentials are authenticated then the Guest/Anonymous credentials are used to complete the request to the sharename.  If the request to the sharename cannot be completed then you get your access is denied message and unless you already have an IPC$ mapping, a window will appear asking for the username and password of a user that can access the share.

So if you are attempting to access this computer by browsing the network, selecting the computer and then accessing the share.  You are using Guest/Anonymous access.

First, you must remove the IPC$ mapping:
net use \\<servername>\ipc$ /d

Open in new window

Second, you must access the share using \\<servername>\<sharename> instead of trying to browse to it.

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

GhalanTechAuthor Commented:
Thanks for your answer but we don't browse to find the computer.

We're always accessing the share via \\<servername>\<sharename> as described in your reply.

When the popup show to authenticate, we enter the domain credentials (as the data are on the DC server) it's working to access the network share but when we try to create, add files in the folder it's not working due to a lack of permissions.

It's very weird
That is weird.  What are the share persmissions?Capture.JPGWhat are the effective rights of the user for the folder that the share points to?Effective access of a disabled user to the above shared folder.-saige-
GhalanTechAuthor Commented:
Thanks for your answer message,

In fact, the parent folder was not configured correctly, after a search we went through that the permissions for the auth users was not correctly set.

Sorry for the lost time ;)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GhalanTechAuthor Commented:
It was an easy trouble
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.