NTFS problem



Hi,

I posted about this a while back, but didn't get to follow it through.

Anyway, consider this command, where H: is mapped to a share on a
Windows 2003 file server:

H:\>cacls accounts
H:\Accounts Domain\Accountants:(OI)(CI)C
Domain\administrator:(OI)(CI)F

It demonstrates that the domain administrator has full control on the
"accounts" folder, and the accounts group has change control. No other
users should have access.

We have a user. Let's call him Bob. I have checked, double checked and
triple checked that he is not in the "accountants" group.

When he logs into a Windows 2003 terminal server, maps the drive in
question, he gets an "access denied" when he tries to open the folder
in question.

When he logs onto his Windows XP workstation, member of the same
domain, he CAN list the files in that folder. He cannot open them,
("access denied" again) but he CAN list them, which is a security issue
to us.

He does not have Full Control on the H:, and I have disabled caching on
the share as recommended already.

Any assistance appreciated.

.



Relevant Pages

  • RE: DST update for Exchange 2003 and Outlook 2003
    ... When you use the Roaming Profile and Folder ... Click Services tab and select Hide All Microsoft Services and Disable ... CREATOR OWNER: Full Control ... Open Windows explorer, navigate to ...
    (microsoft.public.exchange.admin)
  • Re: Permissions
    ... >certain files on a LAN network. ... file sharing" and define access control lists that specify user names ... Windows XP Professional File Sharing ... Create a compressed folder and define a password for it. ...
    (microsoft.public.windowsxp.network_web)
  • Re: dumb Acces rights question...
    ... I need to look after the network and want to "Control" access ... Folder contains: ... ACCOUNTS & PAYROLL and added the various ... NTFS security set to system ...
    (microsoft.public.windows.server.sbs)
  • Re: AD Delegation Fails - Permissions Disappear
    ... the Windows domain controller that holds the primary domain ... ACL on all security principals (users, groups, and machine accounts) present ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows explorer in a form to select a folder/path
    ... That is, when I place the mouse over the control, ... the cursor changes to the "hand", ... it doesn't always open the Windows Explorer. ... >> of a folder on the shared drive ...
    (microsoft.public.access.formscoding)

Quantcast