Sharing security - command line vs. start/run

From: Peter Bako (pbako@teltone.com)
Date: 06/28/02 

From: "Peter Bako" <pbako@teltone.com>
Date: Fri, 28 Jun 2002 14:40:13 -0700

I have noticed a very strange difference between the way security seems to
work between a command line mapping to a shared folder and accessing it via
the Start/Run command. Let me explain:

I have two computers, Machine1 and Machine2 both part of a domain (both
Windows 2000 workstations). On Machine1 I share out a folder using share
level permissions of Change to domain User1. File level permission on all
files within this share are still left at the default. From Machine2 I log
on as domain User2. This user has absolutely no permission to attach to or
see any of the files on the share created on Machine1.

Now on Macine2 (logged in as domain User2) if I go to the Start/Run dialog
and type in \\machine1\share and press OK I get an error dialog with "Access
Denied" - just as I would expect. However if again on Machine2 I open up a
command prompt and type in "net use * \\machine1\share" I will actually
getting a valid drive letter mapping to this share! I cannot read or write
to this letter but the connection is made.

This seems wrong to me. I would expect an Access Denied message in both
cases, yet with a command line it sort of appears to work. (BTW, I even
tried to explicitly Deny access to this share for User2, yet from a command
line the drive letter mapping still worked!). Is this normal, or am I
missing something obvious?

Thanks,
Peter

Relevant Pages

  • Re: Searching shared folders with "net view" (or other command) + login/password possible ?
    ... System error 5 has occurred. ... However I can access every shared folder as long as I know its name in advance by ... Unfortunately the "net view" command does not accept parameters for login resp. ... If you want to solve the problem, though, start from my diagnostics article. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Sharing security - command line vs. start/run
    ... I think it's just a difference in error symptoms/cues. ... write to the drive that the NET USE command mapped. ... > I have noticed a very strange difference between the way security seems to ... > see any of the files on the share created on Machine1. ...
    (microsoft.public.win2000.security)
  • Re: Shared folders
    ... directly issue the net.exe command. ... After sharing the folder in the XPe machine with the command: ... the access to the file in the shared folder of the XPe target is denied. ... If manually I open the explorer and type in the address bar: ...
    (microsoft.public.windowsxp.embedded)
  • Use net Command failed : status 53
    ... I want to use the "use net" command on my windowsce.net device to be ... In the Network ID tab, i entered a valid user and password of the ... computer machine where the shared folder resides. ... and i got the following error message: ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: User functions not working on Task Form
    ... A shared folder in another user's mailbox? ... Author of Configuring Microsoft Outlook 2003 ... a couple of command buttons and combobox. ... i could not find a page open event so have ...
    (microsoft.public.office.developer.outlook.forms)