RE: Access denied errors

Hi John,

Thanks for posting here.

From your post, my understanding on this issue is: the user cannot access
Accounts shared folder, he get the "Access Denied" error message. If I am
off base, please feel free to let me know.

Based on my test on our side, I create the test user; the test user was
granted Read & Execute, List Folder Contents and Read permissions for
Security Permissions and was granted Read permission for Sharing
Permissions. The result turned out that the test user can access the folder
successfully. So in order to troubleshoot this issue, please help provide
some more information:

(1). A more detailed description of the configuration that you did.

(2). Use the tool subinacl to get the shared folder's permissions and send
the output file to me.

Run command like: "subinacl /file=directoriesonly \\server1\share1
/display >C:\ShareACL.txt"
If the subinacl tool hasn't been installed, please download and install the
tool from:
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-
93CF-ED6985E3927B&displaylang=en

Send the above information to me at v-stezhu@xxxxxxxxxxxxxx

More information:

Access Control Best Practices
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/5a6d7830-6c5e-4c93-b8e7-fb446954d91b.mspx

Controlling Access to Files and Folders
http://www.microsoft.com/resources/documentation/windows/2000/server/reskit/
en-us/prork/prdf_fls_cyum.asp?frame=true

I am standing by for your feedback. If you have any information updated,
please feel free to let me know.

Have a nice day!

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================



.

Relevant Pages

  • RE: Force folder within share to have static location
    ... Based on my knowledge, there are two permissions for a shared folder, share ... Please run the following command in a command ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: Win 2003 - Share can be read with no NTFS permission?
    ... The share is on my DC, my test user had local Admin rights on the WS. ... I can create a folder on the share. ... How is the test user inheriting full permissions? ...
    (microsoft.public.win2000.security)
  • Re: Win 2003 - Share can be read with no NTFS permission?
    ... permissions in W3K. ... Add a test user with R X L R ntfs ... I logon with a workstation on that domain as test user ... and try to create a folder and file in the share with no success. ...
    (microsoft.public.win2000.security)
  • Re: share level & ntfs permissions
    ... I set up a share on my Win2003 SBS server the way you report ... Global Group memberships *Domain Users ... your test user is a little more than a test user. ... "Share level permissions should be used in ...
    (microsoft.public.windows.file_system)
  • Re: Win 2003 - Share can be read with no NTFS permission?
    ... Apparently the test user has full control permissions in the parent folder? ... If you create a folder and do not want to use inherited permissions go into ...
    (microsoft.public.win2000.security)