DFS share permissions problem

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

I have created a shared folder called 'Deploy' on a windows server 2003 file
server in which I am putting files that will be accessed only in enforcing
group policy(example: active desktop wallpaper). This is a windows 2000
domain, and the DFS root is active directory. For the folder, I had given
read-only permission to everyone; authenticated users; domain users; domain
computers on the share and on the security tabs (full control given to
administrators).

When I try to access the shared folder with a regular domain user with the
DFS UNC, like this: \\win2kDomainName\DFSRootName\Deploy, I get the following
error: " ... is not accessible. You might not have permission to use this
network resource. Contact the administrator of the server to find out if you
have access permissions. Access is denied." This works if accessed as an
Administrator.

However, if I just use a straight UNC path to the share on the server, I can
access it no problem as a regular user. This also works as an Administrator.

Anybody have any idea what I am doing wrong here?

-jamie-

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

On the machine where the DFS root is defined, verify that the
premissions on the skeletal structure of the DFS construct also
allows Domain Users and for your purposes Domain Computers.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Jamie Schmidt" <JamieSchmidt@discussions.microsoft.com> wrote in message
news:236AD0F9-7AD1-402C-BC65-D0671A9E0F1C@microsoft.com...
> I have created a shared folder called 'Deploy' on a windows server 2003
file
> server in which I am putting files that will be accessed only in enforcing
> group policy(example: active desktop wallpaper). This is a windows 2000
> domain, and the DFS root is active directory. For the folder, I had given
> read-only permission to everyone; authenticated users; domain users;
domain
> computers on the share and on the security tabs (full control given to
> administrators).
>
> When I try to access the shared folder with a regular domain user with the
> DFS UNC, like this: \\win2kDomainName\DFSRootName\Deploy, I get the
following
> error: " ... is not accessible. You might not have permission to use this
> network resource. Contact the administrator of the server to find out if
you
> have access permissions. Access is denied." This works if accessed as an
> Administrator.
>
> However, if I just use a straight UNC path to the share on the server, I
can
> access it no problem as a regular user. This also works as an
Administrator.
>
> Anybody have any idea what I am doing wrong here?
>
> -jamie-

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

"Roger Abell" wrote:

> On the machine where the DFS root is defined, verify that the
> premissions on the skeletal structure of the DFS construct also
> allows Domain Users and for your purposes Domain Computers.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Jamie Schmidt" <JamieSchmidt@discussions.microsoft.com> wrote in message
> news:236AD0F9-7AD1-402C-BC65-D0671A9E0F1C@microsoft.com...
> > I have created a shared folder called 'Deploy' on a windows server 2003
> file
> > server in which I am putting files that will be accessed only in enforcing
> > group policy(example: active desktop wallpaper). This is a windows 2000
> > domain, and the DFS root is active directory. For the folder, I had given
> > read-only permission to everyone; authenticated users; domain users;
> domain
> > computers on the share and on the security tabs (full control given to
> > administrators).
> >
> > When I try to access the shared folder with a regular domain user with the
> > DFS UNC, like this: \\win2kDomainName\DFSRootName\Deploy, I get the
> following
> > error: " ... is not accessible. You might not have permission to use this
> > network resource. Contact the administrator of the server to find out if
> you
> > have access permissions. Access is denied." This works if accessed as an
> > Administrator.
> >
> > However, if I just use a straight UNC path to the share on the server, I
> can
> > access it no problem as a regular user. This also works as an
> Administrator.
> >
> > Anybody have any idea what I am doing wrong here?
> >
> > -jamie-
>
>
thanks for the reply, but the problem is fixed now. I had setup the path
incorrectly on the root target. Instead of putting
\\FileServerName\ShareName for the root target, I put:
\\FileServerName\path\FolderName . Working 100% now.

-jamie-