Re: DFS share permissions problem

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 05/19/05


Date: Wed, 18 May 2005 23:40:43 -0700

On the machine where the DFS root is defined, verify that the
premissions on the skeletal structure of the DFS construct also
allows Domain Users and for your purposes Domain Computers.

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Jamie Schmidt" <JamieSchmidt@discussions.microsoft.com> wrote in message
news:236AD0F9-7AD1-402C-BC65-D0671A9E0F1C@microsoft.com...
> I have created a shared folder called 'Deploy' on a windows server 2003
file
> server in which I am putting files that will be accessed only in enforcing
> group policy(example: active desktop wallpaper).  This is a windows 2000
> domain, and the DFS root is active directory.  For the folder, I had given
> read-only permission to everyone; authenticated users; domain users;
domain
> computers on the share and on the security tabs (full control given to
> administrators).
>
> When I try to access the shared folder with a regular domain user with the
> DFS UNC, like this: \\win2kDomainName\DFSRootName\Deploy, I get the
following
> error: " ... is not accessible.  You might not have permission to use this
> network resource.  Contact the administrator of the server to find out if
you
> have access permissions.  Access is denied."  This works if accessed as an
> Administrator.
>
> However, if I just use a straight UNC path to the share on the server, I
can
> access it no problem as a regular user.  This also works as an
Administrator.
>
> Anybody have any idea what I am doing wrong here?
>
> -jamie-


Relevant Pages

  • Help: ISAPI DLL cannot reach DCOM appserver (access denied)
    ... IIS (5.0 on W2K server machine, not PDC, joined to the main domain) is ... These users are all domain users (not local users of the IIS server). ... user" option which is an administrator) and in launch/access permission ...
    (microsoft.public.inetserver.iis.security)
  • user cannot access the server
    ... is from Dell. ... All of the machines can access the server as administrator ... and domain users except for one machine. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Network printing mystery
    ... on print server check on local policies or on GPO that apply to that printer ... have to be xyz.com domain users) and deny access this computer from network ... Users" from both domains into security. ... workstations as the domain administrator, ...
    (microsoft.public.windows.server.networking)
  • Re: Programs dont open
    ... The user was created as a mobile user and is a Member Of ... Domain Users ... This user is configured as a remote user on the server. ... By this I mean that as an administratot of a local pc the administrator is ...
    (microsoft.public.windows.server.sbs)
  • Re: Least amount of privileges
    ... It depends on what the domain users group has for permissions. ... Does this third party program have a service account that runs the app for ... moving this app off of your sql server and put it on a seperate server. ...
    (microsoft.public.windows.server.active_directory)