"Access Is Denied" Error Message Appears When Permissions Are corr

[Guest Ananth]

Hi All,

 

We recently upgraded a windows 2000 server to Windows 2003 enterprise

edition server, it was a fresh installation.

 

We created all the shares which existed and gave permissions, and user

started working on it for the last 2 days, yesterday we gave windows update

and updated the server using express update, so almost everything got updated.

 

This server is a member server in a AD domain, users are grouped this way.

Two groups H1 and H2 were created in "Tai2d/built" OU and all users were

placed in respective groups according to their privileges. But from today

onwards some users are not able to access some shares.

 

for eg. user1 and user2 are exactly the same, they both belong to the same

group H1, but user2 can access, but user2 is getting access denied. We have

no idea how this can happen, everything set correctly, but...

 

Anybody has seen this behavior before, kindly let us know the solution.

[Guest Ananth]

RE: "Access Is Denied" Error Message Appears When Permissions Are corr

 

To continue with the problem....

 

The Domain Serer was not updated with the latest Windows updates, before

doing that we had updated the member server, but now we have updated both the

servers. but still the problem persists.

 

We can'y figure out why some users can access shares and some others cannot,

even though they are identical, we even copy created a new user, but still no

resolution.

 

now every one is set to access all the shares...

 

Somebody advice pleeeese......

[Guest lforbes]

RE: "Access Is Denied" Error Message Appears When Permissions Are corr

 

Yes,

 

With Windows 2000 when you created a Share it automatically created the

Share Permissions as Everyone = Full Control and then let you set NTFS

permissions to secure the folder.

 

With Windows 2003 they decided to be more "secure" but in doing so messed up

pretty much every admin who didn't know about it before hand. Basically

Windows 2003 server creates EVERY new share with Everyone = Read Share

permissions.

 

Remember Share Permissions are different from NTFS permissions and it is the

MOST restrictive. So if the Share permission = read then everyone = read

regardless of NTFS permissions.

 

Go into Computer Management - Shared Folders and change all the SHARE

permissions on each share back to Everyone = Full Control. That will allow

your NTFS permissions to work properly again.

 

Cheers,

Lara

 

"Ananth" wrote:

> Hi All,

>

> We recently upgraded a windows 2000 server to Windows 2003 enterprise

> edition server, it was a fresh installation.

>

> We created all the shares which existed and gave permissions, and user

> started working on it for the last 2 days, yesterday we gave windows update

> and updated the server using express update, so almost everything got updated.

>

> This server is a member server in a AD domain, users are grouped this way.

> Two groups H1 and H2 were created in "Tai2d/built" OU and all users were

> placed in respective groups according to their privileges. But from today

> onwards some users are not able to access some shares.

>

> for eg. user1 and user2 are exactly the same, they both belong to the same

> group H1, but user2 can access, but user2 is getting access denied. We have

> no idea how this can happen, everything set correctly, but...

>

> Anybody has seen this behavior before, kindly let us know the solution.

[Guest Ananth]

RE: "Access Is Denied" Error Message Appears When Permissions Are

 

RE: "Access Is Denied" Error Message Appears When Permissions Are

 

Thanks Lara,

 

Seems you didn't read through what I posted. We already know of the default

permissions for Everyone group. The issues is not related to that.

 

We have a group called H_Art. After windows update, one member can access a

shared folder which has H_Art having Full Control permissions as Share and

NTFS permissions modify.

 

Problem is that after windows update there is discrepancy in access, some

users can access the share while others get access denied! even a new user

who is a copy of the user who can access the share can't access!!!!

 

Can anyone help!!!

 

"lforbes" wrote:

> Yes,

>

> With Windows 2000 when you created a Share it automatically created the

> Share Permissions as Everyone = Full Control and then let you set NTFS

> permissions to secure the folder.

>

> With Windows 2003 they decided to be more "secure" but in doing so messed up

> pretty much every admin who didn't know about it before hand. Basically

> Windows 2003 server creates EVERY new share with Everyone = Read Share

> permissions.

>

> Remember Share Permissions are different from NTFS permissions and it is the

> MOST restrictive. So if the Share permission = read then everyone = read

> regardless of NTFS permissions.

>

> Go into Computer Management - Shared Folders and change all the SHARE

> permissions on each share back to Everyone = Full Control. That will allow

> your NTFS permissions to work properly again.

>

> Cheers,

> Lara

>

> "Ananth" wrote:

>

> > Hi All,

> >

> > We recently upgraded a windows 2000 server to Windows 2003 enterprise

> > edition server, it was a fresh installation.

> >

> > We created all the shares which existed and gave permissions, and user

> > started working on it for the last 2 days, yesterday we gave windows update

> > and updated the server using express update, so almost everything got updated.

> >

> > This server is a member server in a AD domain, users are grouped this way.

> > Two groups H1 and H2 were created in "Tai2d/built" OU and all users were

> > placed in respective groups according to their privileges. But from today

> > onwards some users are not able to access some shares.

> >

> > for eg. user1 and user2 are exactly the same, they both belong to the same

> > group H1, but user2 can access, but user2 is getting access denied. We have

> > no idea how this can happen, everything set correctly, but...

> >

> > Anybody has seen this behavior before, kindly let us know the solution.

[Guest lforbes]

RE: "Access Is Denied" Error Message Appears When Permissions Are

 

RE: "Access Is Denied" Error Message Appears When Permissions Are

 

Yes, I wish MS had an "edit" button to their posts. Maybe we can convince

them to go to phpbb?

 

I read quickly and posted and then went back and realized that it wasn't

your problem.

 

It sounds like there have been permissions that have messed up. We had this

happen on my server and I have no idea what happened but on restart Chkdsk

ran and reassigned random permissions on each file and folder differently

that messed everything up.

 

Have you tried reseting NTFS permissions on the Share? I would try that

first. First take ownership as an administrator of all files and folders.

Then set to Everyone Full-Control on the share and then tick to set all

subfolders as well.

 

Then go back and remove the Everyone and put back the group that you want to

give modify access.

 

Sometimes something as simple as that will reset them.

 

You could also delete the group and recreate another one to add the users

to. Maybe it is something in the group itself that has gotten corrupted.

 

The only time I have seen a denied was when the user had denied checked on

the permissions. However, that doesn't seem the case here. Also I saw it

when there was a limit on the number who could access the share and then

another person accessed it. Eg. Shares on a workstation only allow 10 people

to access at once.

 

Are you running Windows 2003 Service Pack 2? I had a LOT of network issues

that were very flaky after installing Service Pack 2. I ended up applying

this patch that solved a lot of my issues.

 

http://support.microsoft.com/kb/936594

http://www.microsoft.com/downloads/details.aspx?FamilyId=50A878A3-EC91-40FC-BA6F-BB5C9982AED8&displaylang=en

 

Let me know any troubleshooting you have done already.

 

Cheers,

Lara

 

 

 

"Ananth" wrote:

> Thanks Lara,

>

> Seems you didn't read through what I posted. We already know of the default

> permissions for Everyone group. The issues is not related to that.

>

> We have a group called H_Art. After windows update, one member can access a

> shared folder which has H_Art having Full Control permissions as Share and

> NTFS permissions modify.

>

> Problem is that after windows update there is discrepancy in access, some

> users can access the share while others get access denied! even a new user

> who is a copy of the user who can access the share can't access!!!!

>

> Can anyone help!!!

>

> "lforbes" wrote:

>

> > Yes,

> >

> > With Windows 2000 when you created a Share it automatically created the

> > Share Permissions as Everyone = Full Control and then let you set NTFS

> > permissions to secure the folder.

> >

> > With Windows 2003 they decided to be more "secure" but in doing so messed up

> > pretty much every admin who didn't know about it before hand. Basically

> > Windows 2003 server creates EVERY new share with Everyone = Read Share

> > permissions.

> >

> > Remember Share Permissions are different from NTFS permissions and it is the

> > MOST restrictive. So if the Share permission = read then everyone = read

> > regardless of NTFS permissions.

> >

> > Go into Computer Management - Shared Folders and change all the SHARE

> > permissions on each share back to Everyone = Full Control. That will allow

> > your NTFS permissions to work properly again.

> >

> > Cheers,

> > Lara

> >

> > "Ananth" wrote:

> >

> > > Hi All,

> > >

> > > We recently upgraded a windows 2000 server to Windows 2003 enterprise

> > > edition server, it was a fresh installation.

> > >

> > > We created all the shares which existed and gave permissions, and user

> > > started working on it for the last 2 days, yesterday we gave windows update

> > > and updated the server using express update, so almost everything got updated.

> > >

> > > This server is a member server in a AD domain, users are grouped this way.

> > > Two groups H1 and H2 were created in "Tai2d/built" OU and all users were

> > > placed in respective groups according to their privileges. But from today

> > > onwards some users are not able to access some shares.

> > >

> > > for eg. user1 and user2 are exactly the same, they both belong to the same

> > > group H1, but user2 can access, but user2 is getting access denied. We have

> > > no idea how this can happen, everything set correctly, but...

> > >

> > > Anybody has seen this behavior before, kindly let us know the solution.

[Guest Ananth]

RE: "Access Is Denied" Error Message Appears When Permissions Are

 

RE: "Access Is Denied" Error Message Appears When Permissions Are

 

Thanks Lara, we tried some of what you suggested, will do that and will let

you know in a couple of days time...

 

regards

anth.