Re: Programs and Group Policies

From: Gordon Ryan (gryan_at_r.e.m.o.v.e.this.longneckconsulting.com)
Date: 10/06/04


Date: Wed, 6 Oct 2004 11:06:06 +1000

if you are logged on as the non admin account, have you tried to use
explorer and navigate to the folder to see if you can read the files?

-- 
Gordon Ryan
Longneck Consulting Pty. Ltd
http://www.longneckconsulting.com
"Robert" <bob@bob.net> wrote in message 
news:%23a2udAzqEHA.536@TK2MSFTNGP09.phx.gbl...
> When logged on as athe non administrative account, you begin to load the 
> program then incurr a memory error.  It states the specific file, which 
> resides under the shared folder.
>
> Robert
> "Gordon Ryan" <gryan@r.e.m.o.v.e.this.longneckconsulting.com> wrote in 
> message news:eyHST1xqEHA.2796@TK2MSFTNGP10.phx.gbl...
>> If the NTFS permissions are more restrictive than the share permissions, 
>> then they will win.  Basically what ever is the most restrictive of the 
>> the NTFS & Share permissions is the effective permissions.
>>
>> So you will need to go to the security tab for the folder that is holding 
>> the files on the local machine and have a look.  If you don't see the 
>> security tab then you are either logged in as an account that doesn't 
>> have admin rights for the folder or you still have simple file sharing 
>> still enabled.
>>
>> When you log on as the non administrative account, can you actually load 
>> the program? or does it load, you just can't log in?
>>
>> -- 
>> Gordon Ryan
>> Longneck Consulting Pty. Ltd
>> http://www.longneckconsulting.com
>> "Robert" <bob@bob.net> wrote in message 
>> news:%23rr%23zIuqEHA.3760@TK2MSFTNGP09.phx.gbl...
>>> O.K.  I think were beginning to get on the same page.  The application 
>>> resides on the local machine.  The application connects to a SQL server 
>>> (The SBS2003).
>>>
>>> The drive is formatted with NTFS.  Now how do I check to see if local 
>>> file permissions are overriding the Share permissions?
>>>
>>> Robert
>>>
>>> "Gordon Ryan" <gryan@r.e.m.o.v.e.this.longneckconsulting.com> wrote in 
>>> message news:eZ0s9ttqEHA.868@TK2MSFTNGP10.phx.gbl...
>>>> Hi Robert,
>>>>
>>>> thanks for reposting.
>>>>
>>>> My initial thoughts are that it is a file permissions issue.  I notice 
>>>> you mention the permissions when sharing the folder.
>>>>
>>>> Does the data (application?) reside on the local machine or is it on a 
>>>> network share?
>>>> Also is the drive where the files are stored formatted with NTFS?
>>>>
>>>> It is possible that you have NTFS permissions (local file permissions) 
>>>> that are overriding the the Share permissions.
>>>>
>>>> hth
>>>>
>>>> Gordon
>>>>
>>>> -- 
>>>> Gordon Ryan
>>>> Longneck Consulting Pty. Ltd
>>>> http://www.longneckconsulting.com
>>>> "Robert" <bob@bob.net> wrote in message 
>>>> news:upQ9dotqEHA.3252@TK2MSFTNGP14.phx.gbl...
>>>>> I've checked the Administrators Group on the workstation
>>>>>
>>>>> Administrator
>>>>> owhc\Administrator
>>>>> owhc\Domain Admins
>>>>>
>>>>> and several other users with that are in the Domain Admins group on 
>>>>> the server are listed.  Indicating that Domain Admins are in the local 
>>>>> administrator security group.
>>>>>
>>>>> Yes there is permissioning within the application itself with a list 
>>>>> of it's own users and passwords.  This allows for different views and 
>>>>> process permissions within the application.
>>>>>
>>>>> While logged on to the workstation as the local administrator any of 
>>>>> the applications users can log in correctly. But when logged in under 
>>>>> a domain user or domain admin on the workstation, none of the
>>>>> applications users can log in.
>>>>>
>>>>> It seems as though security permissions are not distributed when 
>>>>> domain users (Admins or not)  logon to the workstation, all their 
>>>>> profile information and drives are loaded but it's like the computer 
>>>>> doesn't recognize that Domain Admins have full privileges on the 
>>>>> compter.  In, addition when providing everyone permission by sharing 
>>>>> the folder it should include both local and domain users.
>>>>>
>>>>> Robert
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
> 


Relevant Pages

  • RE: Security permissions on specific account wont take
    ... Domain Admins/Ent Admins has ... Included in Special Access permissions is ability to Modify ... Everytime I go in to AD, his account, ... Have noticed on his account that Domain Admins ...
    (microsoft.public.exchange2000.active.directory.integration)
  • RE: Admins suddenly cannot edit login scripts.
    ... I tried adjusting the permissions on c:\windows\SYSVOL so that domain admins ... > So start with perms on the Logon Folder and the script inside this folder. ... > you have reqd permissions. ... >> able to edit the logon scripts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: NT File Security
    ... > admins from renaming, ... permissions on the folder and increase their permissions. ... opening the files using Microsoft Office programs like MS Word, ...
    (microsoft.public.security)
  • RE: Security permissions on specific account wont take
    ... Included in Special Access permissions is ability to Modify ... Only reason Ent Admins showed to have fukk control was after I changed to ... Everytime I go in to AD, his account, ... Have noticed on his account that Domain Admins ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Move Users Shared Folders
    ... Sharing Permissions ... Domain Admins - Full Control ... SBS Folder Operators - Full Control ...
    (microsoft.public.windows.server.sbs)