Re: Users can access shares through mapped drives but not using unc

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 03/02/04


Date: Tue, 2 Mar 2004 07:41:16 -0500

Gary,

How are you mapping the network drives and how is "logon.cmd" - or whatever
your logon script is called - being delivered to your clients? Meaning,
let's see an example of the logon script and tell us the delivery method (
part of the user's profile, via Group Policy, etc. ).

You mentioned a sub-domain. Where is the 'resource' located - in the child
domain, in another child domain or in the parent domain? Where are the
users located - in the child domain, in another child domain or in the
parent domain?

Is the 'file server' on a Domain Controller or on a Member Server?

Can you access the 'resources' when logged on as a member of the Domain
Admins group ( aka Administrator account or any other member of the Domain
Admins. If so, how about as a member of the Domain Admins group from
another domain )? Can you access the 'resources' when logged on as a
regular user? I think that we know that answer already.

Have you tried from several machines? From various OSes? Probably not
going to make a difference but let's try...

What do you mean when you state that "....but all attempts have the same
effect" in your second paragraph? Can you ping the server on which the
resources reside? Ping via IP Address? Ping via NetBIOS name? Ping via
FQDN? Success or failure of each...I am guessing that all have the "access
to resource is denied" pop up. Just want to be clear.

I might also suggest that you install the Support Tools from either the
WIN2000 Server CD or from the WIN2000 Service Pack CD ( in both cases the
Support Tools are found in the Support | Tools folder ). Then run both
netdiag /v and dcdiag /v on your Domain Controllers and netdiag /v on your
other Member Servers.

HTH,

Cary

"gary8359" <gary8359@hotmail.com> wrote in message
news:6920dad7.0403020357.157ea4aa@posting.google.com...
> I have a problem that I cannot find an answer to. My users are unable
> to access shares as UNC's but can access the shares through mapped
> drives. Permissions are ok on the share and ntfs. The network is fully
> win2k AD subdomain part of a w2k forest. Workstations are all w2k pro
> or winxp. I feel sure it should be a setting in group policy. It is a
> nuisance as we are running out of drive letters to map to.
>
> I have tried the ususal ping, nslookup, using the ip address of the
> server instead of the name, and the full dns address of the server but
> all attempts have the same effect. A windows pops up saying access to
> the resource has been disallowed.
>
> Does anyone have any ideas please?



Relevant Pages

  • SIDHistory and kerberos max token size
    ... kerberos max token size on the client had to be modified ... because each user is a member of almost 1000 groups. ... Some of sites this current domain services are remote where the resource ... server is also the domain controller. ...
    (microsoft.public.windows.server.migration)
  • Re: AD-Fu a bit rusty so a small sec question
    ... Microsoft MVP (Windows Server: Security) ... > The resourse is on a NAS, not a window member server. ... >>> My problem is now assigning that domain local group to a resource. ... not domain local group to assign permissions to a resource. ...
    (microsoft.public.win2000.security)
  • Re: New domain/member server
    ... I had indicated that I cannot ping the dc from the member ... member server and the member server from the dc by fqdn. ... I can also map a drive using a local account ...
    (microsoft.public.win2000.active_directory)
  • Re: Connecting to a server OUTSIDE the users domain
    ... subnets/domains who need a resource in my subnet/domain. ... server is in the 128.82.174 subnet; the users are in the 128.82.224 ... have login accounts prepared on my server. ... Make sure they can ping your server by name. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot access netbios name of the server
    ... there is a difference between the NetBIOS name of the server and the ... NetBIOS name of the domain - not clear what you are trying to do. ... resource. ... Also i can't even ping it. ...
    (microsoft.public.windows.server.networking)