Re: NTFS permissions not applying consistently



One possibility is that XP Pro can use stored credentials and the user is
not using the credentials you expect to access that share where access is
denied. While logged on as the user being denied access go to Control
Panel/user accounts/user - manage my network passwords to see and delete or
modify references to the share that is being denied access. It may also help
to check the security log of the server with the share where access is being
denied to see if there are any logon failures recorded at the time of the
access failure that may have helpful information. --- Steve


"Phil McNeill" <philmcneill@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:u71vA4UlGHA.4100@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have two shared folders on the same server, Homedirs and Test. Share
permissions on both are Full Control to the Everyone Group. Both have the
same NTFS permissions set. From a Windows 2000 client I can open either
of them. With the same user account from a Windows XP client I can open
and read 1 of them, but the other one results in the error message:

" \\servername\homedirs is not accessible. You might not have permission
to use this network resource. Contact the administrator of this server to
find out if you have access permissions.

Access is denied."

The share I'm having trouble getting into (only on XP clients) was
originally set up to allow only Traverse on "this folder only", and I just
added "List Folder/Read Data" last night. The other test folder that is
working fine was set up exactly the same as that when I created it
yesterday.

I can see why there might be a difference between how the two OSes handle
the file level permissions, but why would XP be able to open one and not
the other when the share and file level permissions are identical? The
user I'm testing with is not a domain admin, so is gaining access as a
member of Everyone. (I've had another standard user try the same from
another machine with the same results.

Any thoughts appreciated.

Thanks,

Phil

Here are the permissions for the two:

Accessible share:

"F:\test DOMAIN\Domain Admins:(OI)(CI)(IO)F
DOMAIN\Domain Admins:(special access:)

DELETE
READ_CONTROL
WRITE_OWNER
SYNCHRONIZE
FILE_GENERIC_READ
FILE_GENERIC_WRITE
FILE_GENERIC_EXECUTE
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_WRITE_EA
FILE_EXECUTE
FILE_DELETE_CHILD
FILE_READ_ATTRIBUTES
FILE_WRITE_ATTRIBUTES

Everyone:(special access:)

SYNCHRONIZE
FILE_READ_DATA
FILE_EXECUTE

NT AUTHORITY\SYSTEM:(OI)(CI)F"

Inaccessible share:

H:\homedirs DOMAIN\Domain Admins:(OI)(CI)(IO)F
DOMAIN\Domain Admins:(special access:)

DELETE
READ_CONTROL
WRITE_OWNER
SYNCHRONIZE
FILE_GENERIC_READ
FILE_GENERIC_WRITE
FILE_GENERIC_EXECUTE
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_WRITE_EA
FILE_EXECUTE
FILE_DELETE_CHILD
FILE_READ_ATTRIBUTES
FILE_WRITE_ATTRIBUTES

Everyone:(special access:)

SYNCHRONIZE
FILE_READ_DATA
FILE_EXECUTE

NT AUTHORITY\SYSTEM:(OI)(CI)F



.



Relevant Pages

  • Re: Problem accessing user machine.
    ... you can write to the shared folder. ... if you do use the connectcomputer wizard to join client computer ... Select Sharing tab, click Permissions button ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Strange Bug with XP client and Win2k Server !
    ... Here's a very strange problem with a Windows XP client ... off folder of share 2. ... permissions you won't be able to open the drop off ... Now enable file sharing for Macs on share 1 with the ...
    (microsoft.public.windowsxp.security_admin)
  • Strange sharing problem with winXP
    ... Here's a very strange problem with a Windows XP client ... off folder of share 2. ... permissions you won't be able to open the drop off ... Now enable file sharing for Macs on share 1 with the ...
    (microsoft.public.windowsxp.security_admin)
  • Strange Bug with WinXP client and Win2K Server
    ... Here's a very strange problem with a Windows XP client ... off folder of share 2. ... permissions you won't be able to open the drop off ... Now enable file sharing for Macs on share 1 with the ...
    (microsoft.public.win2000.security)
  • Strange Win2k/WinXP sharing problem
    ... Here's a very strange problem with a Windows XP client ... off folder of share 2. ... permissions you won't be able to open the drop off ... Now enable file sharing for Macs on share 1 with the ...
    (microsoft.public.win2000.security)