Permissions (again) 2

[sharyn]

GRRRR these Win2k machines are driving me nuts!!! Ok..here's the scenario....

I have a user..just a regular domain user, on a win2k pro box. She needs to have full control of a share folder across the network. The share folder is hosted on a windows 98 box. She is the only one that should have full control, everyone else in the domain has read only access.

The sharing on the win98 box is set to user level, with the access list coming from our domain. The sharing properties for this particular folder are set to everyone read only, and her account, full control.

When I log on as her, from my win98 box (this is not the box that is hosting the share), I have full control of the folder, like I'm supposed to. When I log on as her from my win2k box, I have read only access.

Help! This just shouldn't be so difficult! GRRRRRR once again.

 

[butchrecon]

This is a long shot but does she have local Admin rights on the Win2K box? Try setting her rights to that and see what happens. I am guessing Could be very wrong!

 

[sharyn]

Thanks...she can't have local admin rights on the win2k box, so even if this did work, I couldn't use it. Appreciate the help though

 

[Guest_imported]

Sharyn.. Question? Did you try to give your user administrative rights as BUTCHRECON suggested? I'm just curious if it did work, even if not a viable solution.

As for the fix, Go into Computer Management (Start / Programs / Admin Tools / Computer Management) Under -Storage <Logical Drives> (if desired share is mapped it will be displayed here [if not do exit management, do so, and return to Comp Manag]), r-click, then PROPERTIES. Click SECURITY tab. Make sure user has Full Control rights. If user is not listed, will have to be added.

This should fix your problems... please post if successful. If not I can dig abit into your problem to find solution. Good Luck!! -md

 

[sharyn]

Thanks again for your response. As suggested, I did give the user admin rights to the win2k box, and yes, this worked. After giving her admin rights, she was able to access the share with full control. However, like I mentioned, this is not a viable option for me.

Next, I mapped a drive to the share that she is supposed to have full access to. When I went to computermanagement, logical drives, and right clicked on the drive I had just mapped the share to, there is no securities tab. Thinking this is because she is just a regular user, and not an admin, I re-logged on as an admin, mapped the share again, and right clicked. There is still no securities tab. My guess is that because this share is on a win98 box, there won't ever be a securities tab. I tested this with a share on one of our NT 4.0 servers and the securities tab was there.

So, I'm back to square one. So far, my options are to give this particular user admin rights to her local machine, which is against company policy, or give everyone full access to the share, which is also not something I want to do.

I'm open to any other suggestions!

Thanks again for all your help.
Sharyn

 

[spawny]

Hi Sharyn,

I am new to the It sphere but our company had a similar problem. We took the easy option and gave each user administrative rights to their pc but user rights on the network. We couldn't find another solution.

spawny

 

[sharyn]

Hi Spawny,

Thanks for your response. If it was up to me, I would do that since being so restrictive with user rights, both locally and on the network has made double, maybe triple the amount of work for me. However, I am not high enough up in the pecking order to make that kind of decision..I have to do what I'm told, and our company policy is that no one but administrators get admin rights, even on their local machines.

 

[spawny]

Hi Sharyn,

Are you any good with permissions? I can't seem to get mine to work. I want to set up a folder permission so that one group of users (senior designers) have full control, but other junior staff can copy files from the folder, and read on the folder but cannot modify the folder in any way. I have set the permissions but it doesn't seem to do anything, do I need to enable something first?

Spawny

 

[sharyn]

Spawny,

Email me at my real address ..I am more likely to read email then log onto this forum.
Tell me exactly what you want to do, what o/s's u are working with, domain, workgroup and what you are accessing locally as opposed to over the network.

If you are using win2k or nt4.0, just keep in mind, that you are dealing with 2 sets of permissions. One set is for shares being accessed from the local machine, the other set for shares being accessed across the network. When someone accesses shares from across the network, 2 rules are going to be applied. The permission for sharing across the network AND the permissions (security) for accessing from the local machine. If accessing shares across the network, the MOST restrictive of the 2 is going to apply.

For example, if you have a folder named SHARE, and the local security, the security of the folder when accessing it sitting in front of the box is set to EVERYONE read only, yet you give joe full control of SHARE across the network (using sharing permissions) Joe is still going to only have read only access. When using permissions (security) locally, or when using just share permissions, they are cumulative. When using both sharing permissions and local security, the most restrictive applies.

If that doesn't help, just email me at my real email and we can figure out what the problem is.

Have a nice day
Sharyn

 

[sharyn]

oh duh..guess I could give u my real address..

sschmidt@todhunter.com

no..I am not blonde! LOL