You can also try using the "effective permissions" in the Advanced security tab 
for the user to see if the effective permissions end up being denied for 
whatever reason.  This can also help during testing as you make changes to the 
permissions to the folder.

-Aakash Shah

From: [email protected] [mailto:[email protected]] On 
Behalf Of James Rankin
Sent: Wednesday, October 16, 2013 8:07 AM
To: [email protected]
Subject: Re: [NTSysADM] File Server Permission Issue

If the Share permissions are set thus, what are the NTFS permissions on the 
files themselves? Is inheritance turned on for all of the folders they are 
trying to access? Is there any Special access applied in the Advanced section - 
don't forget, a Deny trumps all.

You may need to turn Auditing on specifically for the folder, to see what's 
happening.

Cheers,


JR

On 16 October 2013 15:56, Robert Cato 
<[email protected]<mailto:[email protected]>> wrote:


Windows 2008 Standard SP2 (Virtual on Hyper-V)

A folder on D: is shared with a 1.2TB drive that is 90% full. Share permissions 
are set for Domain Users - Change, Administrators - Full Control.

The issues are  2-3 layers deep in the folder structure. The drives are mapped 
with logon scripts.

There are a couple of isolated issues.

1. UserA gets an access denied when he tries to navigate to: 
L:\Accounting\Accounts Receivable\. He is one the Accounts Receivable folder by 
name with modify permission. He can access other folders in Accounting.
2. UserB  gets an access denied when he tries to navigate to: L:\Shared\Audit. 
Domain users is granted modify access and the user is in domain users.

No luck so far digging around the Event Logs, not sure if we don't have 
auditing turned up enough.

Appreciate any input about what to audit or where to start troubleshooting.

Thanks,
Robert



--
James Rankin
Technical Consultant (ACA, CCA, MCTS)
http://appsensebigot.blogspot.co.uk

Reply via email to