Re: Bizarre User Creation Problem

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Chris (tophe_news_at_hotmail.com)
Date: 06/30/04


Date: Wed, 30 Jun 2004 12:22:59 +0200

ACL = Access control list.
It's really look like you applied rights on the files belonging to users,
not to group.
When you have made the copy, the rights are not duplicate.

So what I would check here :
    - Pick up one the files you can't open, right-click / properties, go to
Security tab, check who can do what.

If I'm right :
    Create security group within AD
    Add your user into this group
    Assign the proper rights on the files to this group

Cheers

"Darren" <anonymous@discussions.microsoft.com> wrote in message
news:237ee01c45e8a$ed04f780$a401280a@phx.gbl...
Sorry what's an ACL? (I'm new to using 'proper' servers,
previously we had a big peer to peer network going on)

I had to copy the files / folders from a different PC to
the new server, I'll double check particular files later
(and also we never had any permissions on particular
files previously), but I don't think it's down to them
since this one account doesn't get read only errors but
any accounts I make from this account do! (and
considering the working account was a copy of another
account that gets read only errors I'm totally baffled.)
One thing has just sprung to mind, I think I was logged
in using the maxines account when I copied the files, but
I can't think that would have made a difference? Could
it?

Cheers

Darren
>-----Original Message-----
>Just wondering here, how the ACLs are applied on te
files you're trying to
>access ?
>I noticed you moved files, if yoiu did it between
folders ont he same box,
>ACL are kept as they were in the originator folder.
>
>
>
>"Darren" <anonymous@discussions.microsoft.com> wrote in
message
>news:237bb01c45e7b$9e8d5f70$a501280a@phx.gbl...
>Hi,
>
>I tested the users on the desktops. As mentioned one of
>them works fine, and that was a copy of one that
>doesn't! I copied the working one and that won't work
>either. I found out after that the shares were set as
>read only so I removed that on the server. I tested the
>same log ins on several PCs with exactly the same
>results. Only the maxines account will work, and it
>works on all of the desktops.
>
>One account works, but copies of it do not. Word and
>Excel files open OK, but Access opens as Read Only,
>unless it's maxines log in. So currently 6 or 7 users
>are logging in as maxines and then are able to open the
>databases fine. My administrator log in also opens the
>databases OK, but other accounts which I created to test
>various things do not work properly either.
>
>it is Win2k3.
>
>Cheers
>>-----Original Message-----
>>Hi,
>>
>>How did you test the users account ? locally on the
>server or from the
>>desktops ?
>>Assuming your server is W2K3, looks like you haven't
>setup the credentials
>>on the share (Read-only by default under W2K3).
>>
>>Chris
>>
>>"Darren" <anonymous@discussions.microsoft.com> a écrit
>dans le message de
>>news:2306101c45df2$862afed0$a501280a@phx.gbl...
>>> Hi All,
>>>
>>> I really hope someone out there can help me with this
>>> problem. I created a user and tested that they could
>>> connect to the server, they could so I copied the user
>>> and just changed the names (there were 6 users all to
>be
>>> added to a group called Sales.)
>>>
>>> I gave Sales as a group permissions on the required
>>> folders, and tested that the 6 users could access the
>>> specified folders, which they all could. Thinking
>that I
>>> had completed my work I then went and set about moving
>>> all the files and folders from our old 'server'
machine
>>> (it was running a Peer to peer type network), and then
>>> the problems started.
>>>
>>> After copying all of the required files / folders I
>then
>>> tried opening an Access '97 (Old I know, we will be
>>> upgrading soon) database, and it worked fine on a log
>in
>>> called maxines
>>>
>>> I then went around the sales teams PCs to point them
at
>>> the correct databases and set up shared folders
>>> etc..exactly the same as I had with the first PC.
>>> However using a different log on meant all of the
>Access
>>> databases opened as read only. I checked the server
>>> settings and removed read only from the folders
>(although
>>> Maxines log on and my administrator log on did not
>cause
>>> read only problems). In desperation I've had to let
>all
>>> 6 users log on using maxines log on, and obviously
that
>>> defeats the purpose of having log ons in the first
>place!
>>>
>>> So why does a copy of a user work when the original
>>> doesn't? And why doesn't a copy of the one that works
>>> not work? Also what the heck can I do to get properly
>>> working individual log ons working?
>>>
>>> PS can anyone also tell me why Windows XP Home refuses
>to
>>> log on a user who has had the user must change
password
>>> at next log on ticked, as soon as I removed the tick
>they
>>> can log in!
>>
>>
>>.
>>
>
>
>.
>



Relevant Pages

  • Re: sbs2003 to (new)server2003 user issue
    ... You have not just add the "name" to ADUC, rightclick My Computer icon on the desktop, choose properties, go to network identification tab, here click properties and choose under Member of "Domain", fill in the domain name and a window will open asking you for an account from the domain with the password. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Laptop not/never part of the domain. ... sbs server dead sunday night. ...
    (microsoft.public.windows.server.active_directory)
  • Re: sbs2003 to (new)server2003 user issue
    ... Meinolf Weber ... This posting is provided "AS IS" with no warranties, and confers no rights. ... sbs server dead sunday night. ... Even if the account in the domain and the local account on the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win2k - Account Operator not working properly
    ... You very likely have other ACL issues other than what was mentioned and I can point them out here for you for free or you can pay someone $200-500 an hour to come check it out. ... In order for that to result in inheritence protection it means the schema had to be modified. ... set the account in the GUI to inherit from its parents. ... Used the delegation wizard, on the top level OU, to assign the desired permissions. ...
    (microsoft.public.windows.server.active_directory)
  • Re: IIS 5 Authentication problem- solved
    ... In Local Security Policies/User Rights Assignment I had ... Can you log in using an administrator account, ... >> case there is no group, it is just the one server, ... >> interactive logon or using basic authentication. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Issues tracking with Project Server2002
    ... know what they're doing when it comes to Project Server. ... We are using the OLAP Admin account for> this functionality and it does have all the SQL rights. ...
    (microsoft.public.project.pro_and_server)