Re: Mapped Drive Question

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Ron Sochanski wrote:
On our corporate LAN, a user on a Windows XP machine logs into the
machine using the Novell Client for Windows. That user can then
apparently map a network drive on the machine for a Windows Server
3003 server using the the same user name/password combo used to log
into the machine, even though no such account exists on the server.
How can this be? Please advise.

Shenan wrote:
What are the share/file and folder permissions on the Windows
[2]003 shared folder?

Ron Sochanski wrote:
On the Windows Server 2003 machine, the share permissions are:

Everyone: Allow Read
webdocs: Allow Full Control, Change, Read

(webdocs is the name of an account on the Windows Server 2003
machine.)

On the same machine, the file permissions are:

Administrators: All* (see below), Special Permissions
Creator Owner: Special Permissions*
System: All* (see below)
Users: Read & Execute*, List Folder Contents*, Read*, Special
Permissions* webdocs: All (see below)

* - greyed

"All" permiisions are Full Control, Modify, Read & Execute, List
Folder Contents, Read, Write

After said user maps the share - can they do anything on it?

Right now you have "Everyone" (which does not limit by domain - everyone
means... Everyone. Authenticated Users would mean "All authenticated domain
users"...) having read access to the share. Just because they can map it
does not mean they can actually do anything (list, read, execute, etc.)
Looking at your file permissions - it doesn;t look like a non-domain user
(unless they have a local machine account and the local machine account on
the computer from which they mapped the network drive from is exactly the
same in both places)

You need to set the "Share" and "File and Folder" permissions in such a way
that only those you desire to have access do and so that the administrators
can still get in to change such things too.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


.

Relevant Pages

  • RE: What server hardening are you doing these days?
    ... familiarity with the newer operating systems. ... was released a decade ago, and we're now dealing with Windows Server 2003, ... windows filesystem permissions". ... > can trash an NT box by denying LocalSystem permissions to ...
    (Focus-Microsoft)
  • RE: Capinst help
    ... If you run your site systems on Windows Server 2003 SP1, ... Resetting the DCOM permissions to pre- Windows Server 2003 SP1 levels ... SP1 splits the previous Launch permission into Local Launch and Remote Launch ...
    (microsoft.public.sms.admin)
  • Re: Folder Permissions
    ... The issue of folder permissions is not clear to me at all. ... The expensive book I bought on Windows Server 2003 seems ... Inheritence for the subfolder's subfolders ...
    (microsoft.public.windows.server.general)
  • Re: Folder Permissions
    ... The issue of folder permissions is not clear to me at all. ... The expensive book I bought on Windows Server 2003 seems ... Inheritence for the subfolder's subfolders *is* enabled, so any NTFS permissions on share1 will exist on any subfolder/files therein. ...
    (microsoft.public.windows.server.general)
  • Re: Mapped Drive Question
    ... On the Windows Server 2003 machine, the share permissions are: ... (webdocs is the name of an account on the Windows Server 2003 machine.) ... even though no such account exists on the server. ...
    (microsoft.public.windowsxp.general)