Upon further investigation it seems to be some sort of security issue
between this NT4 DC and this W2K DC.  I logged on with a domain admin
account to the NT4 DC and can map a drive (C$) to the W2K server, but if I
try to DIR the drive I get access denied.  Doing this from a W2K member
server or WinXP however, I can map the drive and see the contents.  I'm
guessing it is some sort of security it is trying to use that NT4 doesn't
support.  I haven't set up any Domain Security or Group policies yet since
we're still migrating things.  

jeff

-----Original Message-----
From: Dirk Bulinckx [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 02, 2003 3:54 PM
To: [EMAIL PROTECTED]
Subject: RE: [SA-list] W2K rights


if you get an access denied, then you should see that in the eventlog of the
'target' server too and that should include the username.  Is that username
the one of the service user running SA or another user?


dirk.



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Bunting, Jeff
Sent: Tue Sep 02 9:40 PM
To: '[EMAIL PROTECTED]'
Subject: [SA-list] W2K rights


anyone know what rights are necessary to see services under W2K?

My SA service account isn't working on a new 2K DC I set up.  This account
is used for every other server on the domain, so permissions are OK.  It has
logon locally and logon as a service rights.  There are successful logons
recorded in the security log, just when I try to select a service I get an
access denied error.  The SA machine is NT4 SP6, and is checking services on
other NT4, W2K members, and W2K3 DC.

Jeff
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
   unsubscribe SAlive



To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
   unsubscribe SAlive
To unsubscribe from a list, send a mail message to [EMAIL PROTECTED]
With the following in the body of the message:
   unsubscribe SAlive

Reply via email to