Norton Internet security 2005 comes with a firewall,  However i believe it 
binds to the windows firewall and uses it custom interface.  How this would 
react on a preSP2 machine i don't know.  Recently i have  had a peer to peer 
sharing issue that sounded very familiar to what your experiencing.  The 
solution was based on Login rights of the user logged in, who in turn 
created the share.  

I.E..
user "a" is admin 
User 'B' power user or less.

I set the share as B.  Apply security settings.  
user c can see share but cannot access it even thought the security was set 
to everyone.  

I log in as b and can read write blah blah blah.....  

I founds that creating the share as admin works for all users as long as 
the "everyone"  has complete access.  Well to the level actually needed.  

this way both A and B users can read write blah blah blah..... perhaps this 
is by design.  But even if the user A was in the Admin group.  Any share 
created as user A was accessible only as user A.  however all users could see 
share.  I'm not sure exactly how this would apply to a Actdir security 
scheme.  With a little imagination i could plausibly draw connecting lines.  


This is the closest resemblance to the scenario described below i have 
witnessed.  Being that security is granted from the DC it maybe of litte 
help.  

Are you running policy.  If so make sure your CU is not "pushing" out any 
non sharing policy to the group.  if you discover this to be true remember 
the gpupdate command otherwise it may not update to lessened security 
settings.  Or make take up to several days before it "volunteers" to 
replicate those policies locally.  

Ultimately it sounds security related.  SIDS and PIDS if there are 
duplicates throughout your network may cause this unusual behavior.  If so 
you have greater issues to deal with than shares. 

Curious as to how this turns out.  

Glen Miller 
Payflex System USA, Inc. 
Desktop management 
Evolution Administration
402 231 8666
402 231 4357 
402 650 2949 
[EMAIL PROTECTED]



-----Original Message-----
From: "Carlos Magalhaes" <[EMAIL PROTECTED]>
To: <[email protected]>
Date: Fri, 18 Mar 2005 13:47:29 +0200
Subject: RE: [ActiveDir] not able to access xp machine

> Ok so lets walk through this,
> 
> 1. Can you ***double*** check that the permissions on that windows xp
> share is still working as they should be and the user account you are
> using to access that share has permissions both NTFS and on the Share.
> 2. I am not that familiar with Norton does it come bundled with a
> personal firewall.
> 
> C
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of rakesh jakhar
> Sent: 18 March 2005 01:03 PM
> To: [email protected]
> Subject: RE: [ActiveDir] not able to access xp machine 
> 
> Dear thans for the prompt response i am trying to
> access some shared folder what we used to access from
> from today itself it is showing denied access
> permission, nothing has been changed. i dont know how
> it is happening. we are using norton antivirus version
> 7.6
> 
> Thanks,
> Rakesh
> --- Carlos Magalhaes <[EMAIL PROTECTED]> wrote:
> > Do you have any other firewalls or antivirus
> > software that come bundled
> > with firewall software?
> > What resource are you trying to access exactly?
> > 
> > C
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On
> > Behalf Of rakesh jakhar
> > Sent: 18 March 2005 11:40 AM
> > To: [email protected]
> > Subject: RE: [ActiveDir] not able to access xp
> > machine 
> > 
> > there is no service pack 2 on that machine so no
> > firewall.
> > --- Carlos Magalhaes <[EMAIL PROTECTED]> wrote:
> > > Well switching it off is a bit hefty if you just
> > > trying to trouble
> > > shoot.
> > > 
> > > What exactly are you trying to access on that XP
> > > machine, maybe you just
> > > need a simple rule on that firewall to allow you
> > to
> > > connect to that
> > > recourse.
> > > 
> > >  
> > > 
> > > C
> > > 
> > > Need AD programming help:
> > >
> >
> http://groups.yahoo.com/group/adsianddirectoryservices
> > > 
> > > 
> > >  
> > > 
> > > ________________________________
> > > 
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] On
> > > Behalf Of Tashildar,
> > > Dinesh (Cognizant)
> > > Sent: 18 March 2005 10:55 AM
> > > To: [email protected]
> > > Subject: RE: [ActiveDir] not able to access xp
> > > machine 
> > > 
> > >  
> > > 
> > > Check which service pack you have on those boxes.
> > If
> > > its Windows XP SP2
> > > then defiantly firewall in ON. Go to control panel
> > > switched off
> > > firewall.
> > > 
> > >  
> > > 
> > > Regards, 
> > > Dinesh Tashildar 
> > > 
> > >  
> > > 
> > >  
> > > 
> > > ________________________________
> > > 
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] On
> > > Behalf Of rakesh jakhar
> > > Sent: Friday, March 18, 2005 2:21 PM
> > > To: [email protected]
> > > Subject: [ActiveDir] not able to access xp machine
> > 
> > > 
> > > Hi all,
> > > 
> > >  
> > > 
> > > I am facing a porblem while accessing two xp
> > systems
> > > with each other
> > > inspite of both are member of same domain. when i
> > > try to access it is
> > > showing access denied otherwise an access blank
> > > page. & both systems are
> > > able to access any other systems in the domain.
> > > 
> > > Please m looking for a response
> > > 
> > >  
> > > 
> > > Thanks, 
> > > 
> > > Rakesh Jakhar
> > > 
> > > ________________________________
> > > 
> > > Do you Yahoo!?
> > > Yahoo! Small Business - Try our new resources
> > site!
> > >
> >
> <http://us.rd.yahoo.com/evt=31637/*http:/smallbusiness.yahoo.com/resour
> c
> > > es/>  
> > > 
> > > This e-mail and any files transmitted with it are
> > > for the sole use of
> > > the intended recipient(s) and may contain
> > > confidential and privileged
> > > information.
> > > If you are not the intended recipient, please
> > > contact the sender by
> > > reply e-mail and destroy all copies of the
> > original
> > > message. 
> > > Any unauthorised review, use, disclosure,
> > > dissemination, forwarding,
> > > printing or copying of this email or any action
> > > taken in reliance on
> > > this e-mail is strictly 
> > > prohibited and may be unlawful.
> > > 
> > > Visit us at http://www.cognizant.com
> > >    
> > > 
> > 
> > 
> >       
> > __________________________________ 
> > Do you Yahoo!? 
> > Take Yahoo! Mail with you! Get it on your mobile
> > phone. 
> > http://mobile.yahoo.com/maildemo 
> > List info   : http://www.activedir.org/List.aspx
> > List FAQ    : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> >
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> > List info   : http://www.activedir.org/List.aspx
> > List FAQ    : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> >
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> > 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to