Guest SBN via WinServerKB.com Posted September 10, 2007 Posted September 10, 2007 Hey guys i have a problem with one of my network shared folder, this folder contains a software that i want to install across the network. my problem is that, folder has been shared and i have given everyone a full access (i mean really total access to this folder) but i get the access denied problem. what makes me confuse is that i have other shared folders which contains also some softwares and everyone only has read and execute permission but they dont have any problem, they cant install the softwares across the network. But this particular network shared folder keeps on denying everyone who access it and yet everyone has total access on it....:) can anyone pls advice... -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1
Guest Mathieu CHATEAU Posted September 10, 2007 Posted September 10, 2007 Re: Network Share Hello, check the ntfs security rights. -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "SBN via WinServerKB.com" <u32166@uwe> wrote in message news:7800384881e68@uwe... > Hey guys i have a problem with one of my network shared folder, this > folder > contains a software that i want to install across the network. my problem > is > that, folder has been shared and i have given everyone a full access (i > mean > really total access to this folder) but i get the access denied problem. > what > makes me confuse is that i have other shared folders which contains also > some > softwares and everyone only has read and execute permission but they dont > have any problem, they cant install the softwares across the network. But > this particular network shared folder keeps on denying everyone who access > it > and yet everyone has total access on it....:) can anyone pls advice... > > -- > Message posted via WinServerKB.com > http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >
Guest Pegasus \(MVP\) Posted September 10, 2007 Posted September 10, 2007 Re: Network Share "SBN via WinServerKB.com" <u32166@uwe> wrote in message news:7800384881e68@uwe... > Hey guys i have a problem with one of my network shared folder, this > folder > contains a software that i want to install across the network. my problem > is > that, folder has been shared and i have given everyone a full access (i > mean > really total access to this folder) but i get the access denied problem. > what > makes me confuse is that i have other shared folders which contains also > some > softwares and everyone only has read and execute permission but they dont > have any problem, they cant install the softwares across the network. But > this particular network shared folder keeps on denying everyone who access > it > and yet everyone has total access on it....:) can anyone pls advice... > > -- > Message posted via WinServerKB.com > http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 > There are two sets of access rights: - NTFS permissions - Share access rights You don't say which one you adjusted. The usual method is to grant full access to the share to everyone and apply appropriate restrictions to the NTFS permissions.
Guest SBS Rocker Posted September 10, 2007 Posted September 10, 2007 Re: Network Share Well if you have given EVERYONE Full access at share level then the problem exists in your NTFS permissions. Unless you have other groups in the share level security that are more restrictive. This will superceed the FULL access. "SBN via WinServerKB.com" <u32166@uwe> wrote in message news:7800384881e68@uwe... > Hey guys i have a problem with one of my network shared folder, this > folder > contains a software that i want to install across the network. my problem > is > that, folder has been shared and i have given everyone a full access (i > mean > really total access to this folder) but i get the access denied problem. > what > makes me confuse is that i have other shared folders which contains also > some > softwares and everyone only has read and execute permission but they dont > have any problem, they cant install the softwares across the network. But > this particular network shared folder keeps on denying everyone who access > it > and yet everyone has total access on it....:) can anyone pls advice... > > -- > Message posted via WinServerKB.com > http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >
Guest SBN via WinServerKB.com Posted September 11, 2007 Posted September 11, 2007 Re: Network Share I have given everyone a full share access and NTFS permission...and thats makes me curiuos whats wrong... -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1
Guest Mathieu CHATEAU Posted September 11, 2007 Posted September 11, 2007 Re: Network Share Hello, 1/if it's group based and you created the group recently, you must logoff/logon to get a new token with this group 2/check for any deny 3/...would check again the whole rights... -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "SBN via WinServerKB.com" <u32166@uwe> wrote in message news:78099ba96e07a@uwe... >I have given everyone a full share access and NTFS permission...and thats > makes me curiuos whats wrong... > > -- > Message posted via WinServerKB.com > http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >
Guest Brains,None Posted September 11, 2007 Posted September 11, 2007 Re: Network Share Pegasus (MVP) wrote: > "SBN via WinServerKB.com" <u32166@uwe> wrote in message > news:7800384881e68@uwe... >> Hey guys i have a problem with one of my network shared folder, this >> folder >> contains a software that i want to install across the network. my problem >> is >> that, folder has been shared and i have given everyone a full access (i >> mean >> really total access to this folder) but i get the access denied problem. >> what >> makes me confuse is that i have other shared folders which contains also >> some >> softwares and everyone only has read and execute permission but they dont >> have any problem, they cant install the softwares across the network. But >> this particular network shared folder keeps on denying everyone who access >> it >> and yet everyone has total access on it....:) can anyone pls advice... >> >> -- >> Message posted via WinServerKB.com >> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >> > > There are two sets of access rights: > - NTFS permissions > - Share access rights > > You don't say which one you adjusted. The usual method > is to grant full access to the share to everyone and apply > appropriate restrictions to the NTFS permissions. > > I have a question here... wouldn't it be better to give authorized users the rights on the share, instead of everyone? would that gain anything security wise? j.
Guest Pegasus \(MVP\) Posted September 11, 2007 Posted September 11, 2007 Re: Network Share "Brains,None" <noone@overyonder.org> wrote in message news:us32iKI9HHA.464@TK2MSFTNGP02.phx.gbl... > Pegasus (MVP) wrote: >> "SBN via WinServerKB.com" <u32166@uwe> wrote in message >> news:7800384881e68@uwe... >>> Hey guys i have a problem with one of my network shared folder, this >>> folder >>> contains a software that i want to install across the network. my >>> problem is >>> that, folder has been shared and i have given everyone a full access (i >>> mean >>> really total access to this folder) but i get the access denied problem. >>> what >>> makes me confuse is that i have other shared folders which contains also >>> some >>> softwares and everyone only has read and execute permission but they >>> dont >>> have any problem, they cant install the softwares across the network. >>> But >>> this particular network shared folder keeps on denying everyone who >>> access it >>> and yet everyone has total access on it....:) can anyone pls advice... >>> >>> -- >>> Message posted via WinServerKB.com >>> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >>> >> >> There are two sets of access rights: >> - NTFS permissions >> - Share access rights >> >> You don't say which one you adjusted. The usual method >> is to grant full access to the share to everyone and apply >> appropriate restrictions to the NTFS permissions. > I have a question here... wouldn't it be better to give authorized users > the rights on the share, instead of everyone? would that gain anything > security wise? > NTFS permissions are suffiently secure in their own right. Having two security mechanisms in place violates the KISS principle, which explains the occasional confused post like this one.
Guest SBS Rocker Posted September 11, 2007 Posted September 11, 2007 Re: Network Share Actually the proper group would be AUTHENTICATED USERS as opposed to EVERYONE.(Default) "Brains,None" <noone@overyonder.org> wrote in message news:us32iKI9HHA.464@TK2MSFTNGP02.phx.gbl... > Pegasus (MVP) wrote: >> "SBN via WinServerKB.com" <u32166@uwe> wrote in message >> news:7800384881e68@uwe... >>> Hey guys i have a problem with one of my network shared folder, this >>> folder >>> contains a software that i want to install across the network. my >>> problem is >>> that, folder has been shared and i have given everyone a full access (i >>> mean >>> really total access to this folder) but i get the access denied problem. >>> what >>> makes me confuse is that i have other shared folders which contains also >>> some >>> softwares and everyone only has read and execute permission but they >>> dont >>> have any problem, they cant install the softwares across the network. >>> But >>> this particular network shared folder keeps on denying everyone who >>> access it >>> and yet everyone has total access on it....:) can anyone pls advice... >>> >>> -- >>> Message posted via WinServerKB.com >>> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >>> >> >> There are two sets of access rights: >> - NTFS permissions >> - Share access rights >> >> You don't say which one you adjusted. The usual method >> is to grant full access to the share to everyone and apply >> appropriate restrictions to the NTFS permissions. > I have a question here... wouldn't it be better to give authorized users > the rights on the share, instead of everyone? would that gain anything > security wise? > > j.
Guest Brains,None Posted September 11, 2007 Posted September 11, 2007 Re: Network Share Pegasus (MVP) wrote: > "Brains,None" <noone@overyonder.org> wrote in message > news:us32iKI9HHA.464@TK2MSFTNGP02.phx.gbl... >> Pegasus (MVP) wrote: >>> "SBN via WinServerKB.com" <u32166@uwe> wrote in message >>> news:7800384881e68@uwe... >>>> Hey guys i have a problem with one of my network shared folder, this >>>> folder >>>> contains a software that i want to install across the network. my >>>> problem is >>>> that, folder has been shared and i have given everyone a full access (i >>>> mean >>>> really total access to this folder) but i get the access denied problem. >>>> what >>>> makes me confuse is that i have other shared folders which contains also >>>> some >>>> softwares and everyone only has read and execute permission but they >>>> dont >>>> have any problem, they cant install the softwares across the network. >>>> But >>>> this particular network shared folder keeps on denying everyone who >>>> access it >>>> and yet everyone has total access on it....:) can anyone pls advice... >>>> >>>> -- >>>> Message posted via WinServerKB.com >>>> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >>>> >>> There are two sets of access rights: >>> - NTFS permissions >>> - Share access rights >>> >>> You don't say which one you adjusted. The usual method >>> is to grant full access to the share to everyone and apply >>> appropriate restrictions to the NTFS permissions. >> I have a question here... wouldn't it be better to give authorized users >> the rights on the share, instead of everyone? would that gain anything >> security wise? >> > > NTFS permissions are suffiently secure in their own > right. Having two security mechanisms in place violates > the KISS principle, which explains the occasional > confused post like this one. > > hhmm... Thanks!! so then "they" can still enumerate my shares even if they have no right to see it? that was I was hoping to do. yes, i did run into locking my boss out of his share by disabling all access on the share.. being too tight... so by allowing all authenticated users, that helped. (boy was i red-faced!!!) j.
Guest Brains,None Posted September 11, 2007 Posted September 11, 2007 Re: Network Share Yup... got me!! ;-) SBS Rocker wrote: > Actually the proper group would be AUTHENTICATED USERS as opposed to > EVERYONE.(Default) > > "Brains,None" <noone@overyonder.org> wrote in message > news:us32iKI9HHA.464@TK2MSFTNGP02.phx.gbl... >> Pegasus (MVP) wrote: >>> "SBN via WinServerKB.com" <u32166@uwe> wrote in message >>> news:7800384881e68@uwe... >>>> Hey guys i have a problem with one of my network shared folder, this >>>> folder >>>> contains a software that i want to install across the network. my >>>> problem is >>>> that, folder has been shared and i have given everyone a full access (i >>>> mean >>>> really total access to this folder) but i get the access denied problem. >>>> what >>>> makes me confuse is that i have other shared folders which contains also >>>> some >>>> softwares and everyone only has read and execute permission but they >>>> dont >>>> have any problem, they cant install the softwares across the network. >>>> But >>>> this particular network shared folder keeps on denying everyone who >>>> access it >>>> and yet everyone has total access on it....:) can anyone pls advice... >>>> >>>> -- >>>> Message posted via WinServerKB.com >>>> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >>>> >>> There are two sets of access rights: >>> - NTFS permissions >>> - Share access rights >>> >>> You don't say which one you adjusted. The usual method >>> is to grant full access to the share to everyone and apply >>> appropriate restrictions to the NTFS permissions. >> I have a question here... wouldn't it be better to give authorized users >> the rights on the share, instead of everyone? would that gain anything >> security wise? >> >> j. > >
Guest SBS Rocker Posted September 11, 2007 Posted September 11, 2007 Re: Network Share Is EVERYONE the only listed group or user on the share permissions? "SBN via WinServerKB.com" <u32166@uwe> wrote in message news:78099ba96e07a@uwe... >I have given everyone a full share access and NTFS permission...and thats > makes me curiuos whats wrong... > > -- > Message posted via WinServerKB.com > http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 >
Guest SBN via WinServerKB.com Posted September 12, 2007 Posted September 12, 2007 Re: Network Share SBS Rocker wrote: >Is EVERYONE the only listed group or user on the share permissions? > >>I have given everyone a full share access and NTFS permission...and thats >> makes me curiuos whats wrong... aside from that also is the group and users who must have access to the folder. they all have GOD access and also in the security. -- Message posted via http://www.winserverkb.com
Guest SBS Rocker Posted September 12, 2007 Posted September 12, 2007 Re: Network Share OK given that then I see no reason that the Share security can be superceeding the NTFS permissions. No group or single user has less than FULL control on your Share security? Personally speaking and referring to industry best practices all you really need when setting up a Share folder is AUTHENTICATED USERS=FULL. Some prefer to go with the default EVERYONE. So it is definitely the NTFS permissions that is denying your users the proper access. I know you have aid you have reviewed them and they all look OK. But you need to review them again. Make sure to check any "Advance" permissions and make sure to double check your inheritance levels. Perhaps post the folder structure and groups with access permissions and we all can get a clearer picture. "SBN via WinServerKB.com" <u32166@uwe> wrote in message news:78168cdacd9f6@uwe... > SBS Rocker wrote: >>Is EVERYONE the only listed group or user on the share permissions? >> >>>I have given everyone a full share access and NTFS permission...and thats >>> makes me curiuos whats wrong... > > aside from that also is the group and users who must have access to the > folder. they all have GOD access and also in the security. > > -- > Message posted via http://www.winserverkb.com >
Guest PzR Posted December 20, 2007 Posted December 20, 2007 Re: Network Share So XP and Vista require different rights/permissions to the shares? Our XPP boxes are fine, but Vista has a some level of access just greater than Read Only? For example, we can create folders--but can't name them. They end up New Folder, New Folder 1, etc... We can browse a share, but if you try to save there, we can't. At least, not with Vista. Log in as the same user under XP Pro and all is well??? Any ideas? "Pegasus (MVP)" wrote: > > "SBN via WinServerKB.com" <u32166@uwe> wrote in message > news:7800384881e68@uwe... > > Hey guys i have a problem with one of my network shared folder, this > > folder > > contains a software that i want to install across the network. my problem > > is > > that, folder has been shared and i have given everyone a full access (i > > mean > > really total access to this folder) but i get the access denied problem. > > what > > makes me confuse is that i have other shared folders which contains also > > some > > softwares and everyone only has read and execute permission but they dont > > have any problem, they cant install the softwares across the network. But > > this particular network shared folder keeps on denying everyone who access > > it > > and yet everyone has total access on it....:) can anyone pls advice... > > > > -- > > Message posted via WinServerKB.com > > http://www.winserverkb.com/Uwe/Forums.aspx/windows-server/200709/1 > > > > There are two sets of access rights: > - NTFS permissions > - Share access rights > > You don't say which one you adjusted. The usual method > is to grant full access to the share to everyone and apply > appropriate restrictions to the NTFS permissions. > > >
Recommended Posts