Re: Making C:\WINNT\Temp a share point

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/26/05


Date: Fri, 25 Feb 2005 22:58:49 -0600

I am a bit confused as you first say that they must be domain users and then
say they must be domain admins?? I assume you mean domain admins because
being domain users should not be that big of a deal. Do they have share and
ntfs permissions for this share?? Check to make sure that the permissions
are in place in case a security template or such is changing permissions
back to a defined level. Is this a domain controller or domain member
server? -- Steve

"Bert Sierra" <bsierra@nospam-cableone.net> wrote in message
news:bsierra-87FB1E.14311925022005@corp.supernews.com...
> Our company is using a financial package that is running in a
> client/server fashion. Unfortunately, the software is designed so that
> the contents of C:\WINNT\Temp on the server must be accessible as a
> network drive (T:) on the client workstations. It's stupid, I know, but
> it's the only way the software will work.
>
> On our Win2K Advanced Server, I enabled sharing on C:\WINNT\Temp and set
> permissions so that the "Accounting" group (those users who use the
> financial package) had full read/write privileges. However, Windows
> seems to ignore my permission settings -- Accounting users receive a
> "T:\ is not accessible. Access is denied" message when they attempt to
> mount \\TheServer\Temp. Apparently, C:\WINNT\Temp is handled in a
> special manner by Win2K Advanced Server.
>
> The only workaround we have at present is to make our Accounting users
> also Domain Users. When we do this, they are able to properly mount and
> read/write to \\TheServer\Temp via T:. However, this obviously opens up
> a gaping security hole, as our users can trash our domain and systems in
> substantial ways.
>
> Is there another way to make C:\WINNT\Temp visible as the T: drive on
> our client stations, but not be forced to make our Accounting users
> Domain Admins? I'm stumped. Any help would be appreciated.
>
>
> ----
> Bert Sierra, IT Manager + (928) 778-0170 x130
> Fann Contracting, Inc. + 1403 Industrial Way + Prescott, AZ 86301



Relevant Pages

  • Re: How secure is this?
    ... Second - you have done nothing to keep Domain Users ... you have only taken steps against Domain Admins. ... > Disable File and Printer sharing ... > Disable Computer Browser service. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How secure is this?
    ... Second - you have done nothing to keep Domain Users ... you have only taken steps against Domain Admins. ... > Disable File and Printer sharing ... > Disable Computer Browser service. ...
    (microsoft.public.win2000.security)
  • NTFS file owners gone
    ... Domain users are not being seen by files as the correct ... including domain admins. ... I can reset the permission on ... NTFS permission? ...
    (microsoft.public.win2000.security)
  • Re: localgroup administrators
    ... policy to remove domain users and only add domain admins to local group ... administrators on workstations", which translates in my brain as a full ... If poster wants precisely the same membership in Administrators ...
    (microsoft.public.windows.group_policy)
  • RE: GP wont apply
    ... this particular user acct is member of Domain users and Domain Admins ... Kathy ...
    (microsoft.public.windows.server.active_directory)