Re: ADMT V2 and access denied from resource domain

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: David Missen (davidm_at_angliabc.co.uk)
Date: 03/16/04 

Date: 16 Mar 2004 11:39:37 -0800

Further information:-

I didn't confirm in my earlier posting the result of adding the
w2k3domain\user to the NTFS permissions lists for my share.

The result was as expected i.e. the user could access the share.

I ended up with a resource that has the following setup:-

Share Permissions
Everyone full Control

NTFS Permissions
Domain Admins - FC
w2kroot\user - FC
w2k3domain\user - FC (This is the migrated user account referred to
above)

Running SHOWACLS reports :-
Domain Admins - FC
w2k3domain\user - FC
w2k3domain\user - FC

(i.e both the user entries in the permissions list are identified as
my migrated user)

So surely SID History is in place, but if I take away the explicit
w2k3domain\user FC I get "access denied" when I try to access the
share.

I have used the ADMT tool before for Migrating Domains (N4 to W2K) and
it's always worked in the past.

If I'm being stupid here please tell me (preferably with the answer)
because this is driving me nuts!

I am going to try one more thing...migrating a user account that
doesn't contain an underscore character (I am beginning to clutch at
straws now !)

Relevant Pages

  • Share and NTFS permissions - the right mix?!
    ... Under \\domain\Users are a load of directories - richard, martin, ... They are users private folders, ... Can anyone recommend the best mix of Share and NTFS permissions to do ... I create a Security Group containing everyone but Domain Admins ...
    (microsoft.public.windows.server.general)
  • Re: Share and NTFS permissions - the right mix?!
    ... Under \\domain\Users are a load of directories - richard, martin, ... They are users private folders, ... Can anyone recommend the best mix of Share and NTFS permissions to do ... I create a Security Group containing everyone but Domain Admins ...
    (microsoft.public.windows.server.general)
  • RE: Share and NTFS permissions - the right mix?!
    ... Have you tried adding Domain Admins at the same level where you have denied ... "Richard Price" wrote: ... They are users private folders, ... Can anyone recommend the best mix of Share and NTFS permissions to do ...
    (microsoft.public.windows.server.general)
  • Re: Domain Authentication
    ... >app and it works great. ... can I secure this application to ... >where only domain admins can open the site? ... You use NTFS permissions to restrict specific pages to ...
    (microsoft.public.inetserver.iis.security)