RE: Elevated Permissions on Vista Workstation!!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


Hello Jeff,

Thank you for posting here.

According to your description, I understand the issue is:

You can access the shared folder with a domain user account that does not
have the explicit ALLOW access permission on a Windows Vista client.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
=========================
Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

- First, please verify the access permission of that user account on the
shared folder that has the issue with the following steps:

1. Right-click the shared folder on the file server--->Security tab.
2. Click Advanced button--->Effective Permissions tab--->select button .
3. Search that user account to list its effective permissions.
4. Check the permission that the user account has.

- If the user account has not any permissions on the shared folder but the
user still can access the folder on the Windows Vista client, please
perform the following steps:

1. Restart the Windows Vista client and log on to the computer with that
user account to see whether this problem goes away now. It is possible that
you have accessed the share folder by using administrator account in the
session. After we restart the client computer, we can isolate this kind of
influence.
2. On the Windows Vista client, click start--->Control Panel--->Stored user
names and passwords, and remove all users listed in it. Click OK.

- Please perform the following test to check which user account is actually
used while accessing the shared folder on the Windows Vista client:

1. Logon as a normal user on the Windows Vista client, access a file in the
share folder from a Vista client.
2. On the SBS server, open the Computer Management MMC. Expand Computer
Management--->system tools--->shared folder--->Sessions.
3. Verify whether the user that log on the Windows Vista has established a
session. If not, which user account name is listed?

If the issue persist, please answer following questions for our further
investigation:

Information needed:
=========================
1. What does "I could see some shared folders that did not have these users
in the permission list" mean? Can you describe the exact symptom to me? Do
you mean that the user can not only see the share folder but also access
and open files in the share folder that he/she does not have permission?

2. Have you enabled the Access-based Enumeration on the shared folder on
the file server?

3. If possible, could you please provide detailed steps for me to reproduce
the same issue on my side?

Hope this helps. Also, if you have any questions or concerns, please do not
hesitate to let me know.



Best regards,

Miles Li

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: XP Home
    ... >> home computers which can not access the shared folders on the SBS server ... What is the user account which you used to access the shared folder? ... please paste it in the newsgroup. ...
    (microsoft.public.windows.server.sbs)
  • can this be done easily
    ... What I would like to do is to allow all non-domain PCs to be able to access one shared folder in one of the member server within the domain using one particular user account. ... this account is also able to access shared folders that are accessible by the members in the domain users group which is something I don't want. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Access Permissions
    ... I understand that one local user account can ... When you try to access domain shared folder, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Can this be done without affecting current configuration
    ... What I would like to do is to allow all non-domain PCs to be able to access one shared folder in one of the member server within the domain using one particular user account. ... I removed this user from the domain users group so it only belong to the nondomainuser group. ... this account is also able to access shared folders that are accessible by the members in the domain users group which is something I don't want. ...
    (microsoft.public.windows.server.security)
  • Re: "Save As" Word 2004 files gives XP permission issue
    ... I sent this post to our support group and they would like to get some more ... Mac Word Test ... A shared folder located on a PC running XP ... > naming or permission error on the destination volume". ...
    (microsoft.public.mac.office.word)