Re: Problems mapping a network drive



"sburden77" <sburden77@xxxxxxxxx> wrote in message news:ef18c01e-e8a9-4799-9f1b-b8af95690696@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Oct 14, 5:09 pm, sburden77 <sburde...@xxxxxxxxx> wrote:
On Oct 14, 3:30 am, "Al Dunbar" <aland...@xxxxxxxxxxx> wrote:



> "sburden77" <sburde...@xxxxxxxxx> wrote in message

>news:0a3b2f2a-e112-4716-9ded-7de707d00a7f@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

> > Hello,

> > We're currently running Windows Server 2003 and Windows XP Pro
> > workstations. I'm new to network administration and I'm in the > > process
> > of creating shared folders on our server so our users can store their
> > data. I was able to map a network drive for myself and a couple of
> > others and it worked fine. However, I'm having problems mapping a
> > network drive for this one particular user.

> > She already had a user account on the server and she logs in to a
> > differnt domain than the rest of us because she used to work at our
> > corporate office.

> She has a user account on the server and a domain account from another
> domain. Which account is it that you are having this difficulty with?

> > The error message I'm getting is "Access is denied"
> > when I try to map a network drive. I checked the security tab to make
> > sure she was setup like the other users whom I successfully mapped.

> Which security tab, one on the share, the folder, or on her AD account?

> > I
> > suspect that it has to be a security or permission issue somewhere
> > but, I'm missing it.

> I think you have that right.

> > I appreciate any help or suggestions anyone has.

c> If you can give us a look at all of the relevant security settings
in

> effect, that would help. This should also indicate the trusts that are > in
> effect.

> /Al

Al - Thanks for responding. Now, to answer your questions.

> She has a user account on the server and a domain account from another
> domain. Which account is it that you are having this difficulty with?

She logs in to "corprbc" domain. The rest of us log into "pic" domain.

She's having difficulty with "corprbc" domain.

> Which security tab, one on the share, the folder, or on her AD account?

Shared group folder named "PIC_6S". Allow me to explain.
On our server we have a "Shared Data" folder and within that folder we
have two folders; "Group Data" folder and "User Data" folder. "PIC_6S"
resides in the "Group Data" folder. When I go to "PIC_6S" folder ad
right click and go to "Sharing and Security" and from there click
"Security" tab, I have the following Group or User names
Administrator - Full Control
Creator Owner - Special permissions
Debbie Hentz(dhe...@xxxxxxxxxxxxx) - Modify,Read & Execute,List Folder
Contents,Read,Write,Special Permissions
PIC 6S Read Only - List Folder Contents,Read
PIC 6S Read Write - Read & Execute,List Folder Contents,Read,Write
System - Full Control

> Are you permitting user accounts directly, or using security groups?

Our users can see their Network Drives when they click Start,My
Computer. So I assume this may be user accounts directly.

Thanks- Hide quoted text -

- Show quoted text -

I figured it out. I had to add her individually to permissions and
security tab for shared group folder.

That's good to hear.

Given you are new to network administration, I'd recommend you take some courses and do some reading. NTFS permission management can be complex if not structured logically. Simply being able to make changes to accommodate user requests does not necessarily mean that it has been done in a way that is supportable.

Given there already was a security group with the permissions required by the user ("PIC 6S Read Write"), perhaps a better solution than permitting the folder to her account would have been to add her to that group. The domain configuration and folder scope (local, global, universal) might be such that this could not be done directly. But, ultimately, permissions should be given only to groups not individuals.

/Al


.

Relevant Pages

  • Re: Imagining/Cloning Desktops
    ... Via Network you'll have 2 requirements. ... has an account that has full permissions on it. ... local user account on the ghost storage pc and give it full access only ... source files set and the network drivers copied into the folder burn ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Setting Security/Permissions on a Folder??
    ... I am confused by sharing permissions and security ... > whether access is with local login or over the network. ... If you know that the NTFS level ... > NTFS allows to the accessing account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ATTN : Microsoft - Security Event 529....Second Request for help....
    ... According to the events, the logon ... failure is from the local machine account. ... disconnected from the network. ... Security Event ID 529 is a failure audit for logon/logoff. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Conectivity at Home
    ... systems are all secured via profiles and passwords. ... having a shared folder setup for "everyone" is a breach of such security. ... If your network is behind a NAT router, then your file sharing is more or less ... A designated folder for sharing to "Everyone" isn't a breach of security, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Security Issues
    ... My users have the possibility of choosing whatever folder he or she ... Konversation: Security Issues ... If I start the app manually, UAC darkens the screen and asks me if I ... admin account. ...
    (microsoft.public.dotnet.languages.vb)