RE: "Access Is Denied" Error Message Appears When Permissions Are

Yes, I wish MS had an "edit" button to their posts. Maybe we can convince
them to go to phpbb?

I read quickly and posted and then went back and realized that it wasn't
your problem.

It sounds like there have been permissions that have messed up. We had this
happen on my server and I have no idea what happened but on restart Chkdsk
ran and reassigned random permissions on each file and folder differently
that messed everything up.

Have you tried reseting NTFS permissions on the Share? I would try that
first. First take ownership as an administrator of all files and folders.
Then set to Everyone Full-Control on the share and then tick to set all
subfolders as well.

Then go back and remove the Everyone and put back the group that you want to
give modify access.

Sometimes something as simple as that will reset them.

You could also delete the group and recreate another one to add the users
to. Maybe it is something in the group itself that has gotten corrupted.

The only time I have seen a denied was when the user had denied checked on
the permissions. However, that doesn't seem the case here. Also I saw it
when there was a limit on the number who could access the share and then
another person accessed it. Eg. Shares on a workstation only allow 10 people
to access at once.

Are you running Windows 2003 Service Pack 2? I had a LOT of network issues
that were very flaky after installing Service Pack 2. I ended up applying
this patch that solved a lot of my issues.

http://support.microsoft.com/kb/936594
http://www.microsoft.com/downloads/details.aspx?FamilyId=50A878A3-EC91-40FC-BA6F-BB5C9982AED8&displaylang=en

Let me know any troubleshooting you have done already.

Cheers,
Lara



"Ananth" wrote:

Thanks Lara,

Seems you didn't read through what I posted. We already know of the default
permissions for Everyone group. The issues is not related to that.

We have a group called H_Art. After windows update, one member can access a
shared folder which has H_Art having Full Control permissions as Share and
NTFS permissions modify.

Problem is that after windows update there is discrepancy in access, some
users can access the share while others get access denied! even a new user
who is a copy of the user who can access the share can't access!!!!

Can anyone help!!!

"lforbes" wrote:

Yes,

With Windows 2000 when you created a Share it automatically created the
Share Permissions as Everyone = Full Control and then let you set NTFS
permissions to secure the folder.

With Windows 2003 they decided to be more "secure" but in doing so messed up
pretty much every admin who didn't know about it before hand. Basically
Windows 2003 server creates EVERY new share with Everyone = Read Share
permissions.

Remember Share Permissions are different from NTFS permissions and it is the
MOST restrictive. So if the Share permission = read then everyone = read
regardless of NTFS permissions.

Go into Computer Management - Shared Folders and change all the SHARE
permissions on each share back to Everyone = Full Control. That will allow
your NTFS permissions to work properly again.

Cheers,
Lara

"Ananth" wrote:

Hi All,

We recently upgraded a windows 2000 server to Windows 2003 enterprise
edition server, it was a fresh installation.

We created all the shares which existed and gave permissions, and user
started working on it for the last 2 days, yesterday we gave windows update
and updated the server using express update, so almost everything got updated.

This server is a member server in a AD domain, users are grouped this way.
Two groups H1 and H2 were created in "Tai2d/built" OU and all users were
placed in respective groups according to their privileges. But from today
onwards some users are not able to access some shares.

for eg. user1 and user2 are exactly the same, they both belong to the same
group H1, but user2 can access, but user2 is getting access denied. We have
no idea how this can happen, everything set correctly, but...

Anybody has seen this behavior before, kindly let us know the solution.
.

Quantcast