Re: NTService can't access a share (set to everyone)

From: Colin Nash [MVP] (x_at_x)
Date: 04/28/05 

Date: Wed, 27 Apr 2005 20:04:10 -0400

<cadilhac@gmail.com> wrote in message
news:1114618947.435214.172680@l41g2000cwc.googlegroups.com...
> Hi,
>
> We have the following config:
> - 2 PCs are on a same domain. They are both XP pro. On PC1, a share is
> created with everyone full access control. On PC2, a NT service is
> running as LocalSystem.
>
> In this service I try to open a file in PC1 that is under the share. I
> get an ACCES_DENIED. I can't understand why. If the share is placed on
> a W2K machine, this is the same access denied.
>
> If the service is set to run as a specific user, it can access the
> share.
> If the service (as localsystem) is moved to PC1, it can access the
> share on its same machine.
>
> Thanks for your help.
>
> Nicolas
>

Regardless of permissions, there are restrictions against connecting to
shares without providing any credentials. (The credentials of one machines
SYSTEM account are meaningless to other machines on the network.)

Run SECPOL.MSC from Start--> Run
Under Local Policies, go to Security Options and add the name of your share
to "Network access: Shares that can be accessed anonymously "

Give it a reboot to make sure the policy takes effect (you should be able to
force it by running GPUPDATE on XP.)

Also have a look here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;289655 (I believe
setting the policy as above should accomplish the same thing) 

-- 
Colin Nash
Microsoft MVP
Windows Shell/User

Relevant Pages

  • Re: CM & SW
    ... when a user is logged in or no user logged in, and the credentials (use user ... install using your DOMAIN\user credentials, ... testing, showing me when a new policy or updated policy has been retrieved, ... Zander's SMS Client Center. ...
    (microsoft.public.sms.swdist)
  • Re: Shared folders permissions
    ... SBS must be a DC; i.e. you *must* complete the SBS setup - which results in the SBS as a DC at the root of the domain forest. ... I have instaled a Windows Server 2003 SBS in a workgroup enviroment. ... I have several shares in the server, and, I have changed the policies, ... In the same bit of Group Policy (allowing network access for anonymous ...
    (microsoft.public.windows.server.sbs)
  • Re: MCEX and Domain Login
    ... Domain shares don't show up unless you tweak your domain controller ... policy settings to allow anonymous access to shares, ... you log-in the fast-user switching mode will get reset by domain policy. ... Fast User Switching must be enabled. ...
    (microsoft.public.windows.mediacenter)
  • Shared folders permissions
    ... I have instaled a Windows Server 2003 SBS in a workgroup enviroment. ... I have several shares in the server, and, I have changed the policies, ... Enable the guest account and give it a blank password (computer ... In the same bit of Group Policy (allowing network access for anonymous ...
    (microsoft.public.windows.server.sbs)
  • Re: Folders icon and access to the whole network
    ... Again, why are there local shares besides the default admin shares, at all, ... group policy - this can make it easier. ... Login scripts can be many things. ...
    (microsoft.public.windows.server.general)