Re: Permission Problems

I would simply delete the "renamed" user account
Create a new account for this user as appropriate.

You mention the "Domain Admin" did this
What is your role then?

--
Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the newsgroup so all can take advantage
"Robert" <Robert@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:AC653AC5-DD0D-4FD0-9D21-5E639452F086@xxxxxxxxxxxxxxxx
We are running Windows 2003 SBS as a Domain Controller and Exchange Server.

Pre-problem changes:
Today a new employee took over an old workstation and had the Domain Admin
change the old username (from the previous user to their own account) instead
of creating a new one and deleting the old. Shouldn’t be a big deal, but it
has been an admin no-go in the past. Their were a bunch of permissions
setup on this account and the Domain Admin was trying to save time.

Problem: Since these changes have been made 2 separate accounts can not
access 2 network shares on the network. When logged in even as administrator
these 2 folders report Access denied. The only way I can get into these
folders is if I go directly to the server and open them locally. When I
check the security settings, the following groups are active for this share
(Domain Admins, Administrators, Users). I have also given the same users
Permission to have full control over these folders. Even when I am logged
into the server locally and Browse my network places these 2 folders report
access denied.

Every other network share is accessible and I couldn’t figure out what could
cause this. I tried to create a new folder on the server and shared it
allowing the same groups to have access. Same thing Access denied. Even
though the folder is empty. Now its starting to drive me nuts. So I ran
windows update and installed any security patches on the server. Rebooted.
Now one workstation can access these folders and the other one cant. For
some reason the person who can access this folder is not an admin. They do
have rights to the folder, but I would still hope that the administrator
would be able to access everything specified.

One more thing. For some reason when you reboot the computer a few times it
lets you into these shares. Once you turn it off and back on it reports
access denied again. The only way we can get back in is rebooting a couple
of times. Nothing consistent either, sometimes it takes 2 reboots, sometimes
4. PLEASE HELP. Thanks.

Bob

Relevant Pages

  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... issues, such as a server that might have IIS running on the same machine, ... applicable to SQL 2000 environment, ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)
  • Outlook 2007 SPS 2003 Exchange Problem
    ... I get misc messages that the server is ... Account is primarily for Shared Public Contacts and Calendars. ... account in Mail in the control panel and then recreate it and open Outlook I ... may see the folders one time. ...
    (microsoft.public.outlook)
  • Re: Emails fail to be received
    ... You mention that the server shows no messages when OE says it is trying ... Assuming that you are looking at the right server account, ... MS-MVP Outlook Express ... Do not archive mail in default OE folders. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Server Security
    ... In my opinion you want accountability for administrators and each administrator ... "The" administrator account should not be used and given a very long ... make sure that if there is sensitive information on that server, ... > name with domain admin rights on each. ...
    (microsoft.public.win2000.security)
  • Re: Tough password question!
    ... When I reboot the server, it will not login when the admin ... > account and it will login if I change the domain admin password to ... > on a normal user account, or even another domain admin. ...
    (microsoft.public.windows.server.active_directory)