|
tech
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Users can't log in to sharted directoryApologies if this is going over old ground, but this server admin stuff is all new to me! My users are having a problem saving to their individual directories on a shared drive on our W2K server. Windows 2000 server used purely as a file server. c:\ has a shared directory for all user files. The shared directory has full use permissions set. Permissions for the users directories is set as user/Administrator/full control No inherited permissions Workstations are XPPro Each has a user account set as 'limited' on the XP Workstations Each has a 'Y' drive which is the shared directory on the server Users can access only their directory, but can't save anything to it Users with admin rights can access their directory but can't save to it Logged in as admin can access and save to any directory Basically, if you're logged in as 'Administrator' you can do whatever you like, which is as it should be, but logged in as any user other than 'Administrator' whatever your level of control won't allow saving to the shared network drive 'Y' It's got to be something simple and I'm probably having a 'senior' moment but right now it's giving me sleepless nights! All and any help gratefully received! Cheers, All
Show quote
Hide quote
"Juttle" <Jut***@discussions.microsoft.com> wrote in message So far you have set the NTFS permissions for the user folders.news:73FD8F6B-4A24-4747-90E7-3EA2125A3485@microsoft.com... > Hi, All, > > Apologies if this is going over old ground, but this server admin stuff is > all new to me! > > My users are having a problem saving to their individual directories on a > shared drive on our W2K server. > > Windows 2000 server used purely as a file server. > > c:\ has a shared directory for all user files. The shared directory has > full > use permissions set. > > Permissions for the users directories is set as user/Administrator/full > control > > No inherited permissions > > Workstations are XPPro > > Each has a user account set as 'limited' on the XP Workstations > > Each has a 'Y' drive which is the shared directory on the server > > Users can access only their directory, but can't save anything to it > > Users with admin rights can access their directory but can't save to it > > Logged in as admin can access and save to any directory > > Basically, if you're logged in as 'Administrator' you can do whatever you > like, which is as it should be, but logged in as any user other than > 'Administrator' whatever your level of control won't allow saving to the > shared network drive 'Y' > > It's got to be something simple and I'm probably having a 'senior' moment > but right now it's giving me sleepless nights! > > All and any help gratefully received! > > Cheers, All > You must now set the permissions for the Shares to "Full access for everyone". Note that it's not a good idea for user shares to reside on the system drive. They should be on a dedicated data drive. Hi,
Thanks for the reply. The individual users directorys are full use for user/administrator. There is a security issue as well, as the network is at a school for disruptive kids, therefore each user can only have access to his or her directory, none of the others. If I give 'Everybody' full access, won't that remove the security of the users directories? Show quoteHide quote "Pegasus (MVP)" wrote: > > "Juttle" <Jut***@discussions.microsoft.com> wrote in message > news:73FD8F6B-4A24-4747-90E7-3EA2125A3485@microsoft.com... > > Hi, All, > > > > Apologies if this is going over old ground, but this server admin stuff is > > all new to me! > > > > My users are having a problem saving to their individual directories on a > > shared drive on our W2K server. > > > > Windows 2000 server used purely as a file server. > > > > c:\ has a shared directory for all user files. The shared directory has > > full > > use permissions set. > > > > Permissions for the users directories is set as user/Administrator/full > > control > > > > No inherited permissions > > > > Workstations are XPPro > > > > Each has a user account set as 'limited' on the XP Workstations > > > > Each has a 'Y' drive which is the shared directory on the server > > > > Users can access only their directory, but can't save anything to it > > > > Users with admin rights can access their directory but can't save to it > > > > Logged in as admin can access and save to any directory > > > > Basically, if you're logged in as 'Administrator' you can do whatever you > > like, which is as it should be, but logged in as any user other than > > 'Administrator' whatever your level of control won't allow saving to the > > shared network drive 'Y' > > > > It's got to be something simple and I'm probably having a 'senior' moment > > but right now it's giving me sleepless nights! > > > > All and any help gratefully received! > > > > Cheers, All > > > > So far you have set the NTFS permissions for the user folders. > You must now set the permissions for the Shares to "Full access > for everyone". > > Note that it's not a good idea for user shares to reside on the > system drive. They should be on a dedicated data drive. > > > There are two sets of permissions:
a) Those you have already set for ***folders***. b) Those that are set for ***shares***. You should set the ***share*** permissions to "Full access for everyone", and the ***folder*** permissions so that only the appropriate user can access them. Show quoteHide quote "Juttle" <Jut***@discussions.microsoft.com> wrote in message news:BDCA246F-2FD7-478A-9A96-3FB5E5A13FAE@microsoft.com... > Hi, > > Thanks for the reply. > > The individual users directorys are full use for user/administrator. There > is a security issue as well, as the network is at a school for disruptive > kids, therefore each user can only have access to his or her directory, > none > of the others. > > If I give 'Everybody' full access, won't that remove the security of the > users directories? > > "Pegasus (MVP)" wrote: > >> >> "Juttle" <Jut***@discussions.microsoft.com> wrote in message >> news:73FD8F6B-4A24-4747-90E7-3EA2125A3485@microsoft.com... >> > Hi, All, >> > >> > Apologies if this is going over old ground, but this server admin stuff >> > is >> > all new to me! >> > >> > My users are having a problem saving to their individual directories on >> > a >> > shared drive on our W2K server. >> > >> > Windows 2000 server used purely as a file server. >> > >> > c:\ has a shared directory for all user files. The shared directory has >> > full >> > use permissions set. >> > >> > Permissions for the users directories is set as user/Administrator/full >> > control >> > >> > No inherited permissions >> > >> > Workstations are XPPro >> > >> > Each has a user account set as 'limited' on the XP Workstations >> > >> > Each has a 'Y' drive which is the shared directory on the server >> > >> > Users can access only their directory, but can't save anything to it >> > >> > Users with admin rights can access their directory but can't save to it >> > >> > Logged in as admin can access and save to any directory >> > >> > Basically, if you're logged in as 'Administrator' you can do whatever >> > you >> > like, which is as it should be, but logged in as any user other than >> > 'Administrator' whatever your level of control won't allow saving to >> > the >> > shared network drive 'Y' >> > >> > It's got to be something simple and I'm probably having a 'senior' >> > moment >> > but right now it's giving me sleepless nights! >> > >> > All and any help gratefully received! >> > >> > Cheers, All >> > >> >> So far you have set the NTFS permissions for the user folders. >> You must now set the permissions for the Shares to "Full access >> for everyone". >> >> Note that it's not a good idea for user shares to reside on the >> system drive. They should be on a dedicated data drive. >> >> >> Yes, that's how it it!
If you look at the security on c:\Students, which is the shared drive, the permissions are full access for everyone. If you look at c:\Students\user, the security is set at full access for \user and Administrator. Show quoteHide quote "Pegasus (MVP)" wrote: > There are two sets of permissions: > a) Those you have already set for ***folders***. > b) Those that are set for ***shares***. > > You should set the ***share*** permissions to "Full > access for everyone", and the ***folder*** permissions > so that only the appropriate user can access them. > > > "Juttle" <Jut***@discussions.microsoft.com> wrote in message > news:BDCA246F-2FD7-478A-9A96-3FB5E5A13FAE@microsoft.com... > > Hi, > > > > Thanks for the reply. > > > > The individual users directorys are full use for user/administrator. There > > is a security issue as well, as the network is at a school for disruptive > > kids, therefore each user can only have access to his or her directory, > > none > > of the others. > > > > If I give 'Everybody' full access, won't that remove the security of the > > users directories? > > > > "Pegasus (MVP)" wrote: > > > >> > >> "Juttle" <Jut***@discussions.microsoft.com> wrote in message > >> news:73FD8F6B-4A24-4747-90E7-3EA2125A3485@microsoft.com... > >> > Hi, All, > >> > > >> > Apologies if this is going over old ground, but this server admin stuff > >> > is > >> > all new to me! > >> > > >> > My users are having a problem saving to their individual directories on > >> > a > >> > shared drive on our W2K server. > >> > > >> > Windows 2000 server used purely as a file server. > >> > > >> > c:\ has a shared directory for all user files. The shared directory has > >> > full > >> > use permissions set. > >> > > >> > Permissions for the users directories is set as user/Administrator/full > >> > control > >> > > >> > No inherited permissions > >> > > >> > Workstations are XPPro > >> > > >> > Each has a user account set as 'limited' on the XP Workstations > >> > > >> > Each has a 'Y' drive which is the shared directory on the server > >> > > >> > Users can access only their directory, but can't save anything to it > >> > > >> > Users with admin rights can access their directory but can't save to it > >> > > >> > Logged in as admin can access and save to any directory > >> > > >> > Basically, if you're logged in as 'Administrator' you can do whatever > >> > you > >> > like, which is as it should be, but logged in as any user other than > >> > 'Administrator' whatever your level of control won't allow saving to > >> > the > >> > shared network drive 'Y' > >> > > >> > It's got to be something simple and I'm probably having a 'senior' > >> > moment > >> > but right now it's giving me sleepless nights! > >> > > >> > All and any help gratefully received! > >> > > >> > Cheers, All > >> > > >> > >> So far you have set the NTFS permissions for the user folders. > >> You must now set the permissions for the Shares to "Full access > >> for everyone". > >> > >> Note that it's not a good idea for user shares to reside on the > >> system drive. They should be on a dedicated data drive. > >> > >> > >> > > > Let's have some hard evidence for this.
1. Log on as administrator on the server, open a Command Prompt and type this command: cacls c:\Students\SomeUser > c:\server.txt net share "Students" >> c:\server.txt Replace "Students" with the correct share name of the student's share. 2. Log on as SomeUser on a workstation, open a Command Prompt and type this command: net user "%UserName%" /domain > c:\server.txt cacls "X:\%UserName%" >> c:\server.txt dir "X:\%UserName%" 1>>c:\server.txt 2>>&1 (Replace X: with the correct drive letter for the user share) Now include the contents of both files in your reply. Show quoteHide quote "Juttle" <Jut***@discussions.microsoft.com> wrote in message news:80B5B57A-03AB-4598-A05A-20E438B65182@microsoft.com... > Yes, that's how it it! > > If you look at the security on c:\Students, which is the shared drive, the > permissions are full access for everyone. > > If you look at c:\Students\user, the security is set at full access for > \user and Administrator. > > "Pegasus (MVP)" wrote: > >> There are two sets of permissions: >> a) Those you have already set for ***folders***. >> b) Those that are set for ***shares***. >> >> You should set the ***share*** permissions to "Full >> access for everyone", and the ***folder*** permissions >> so that only the appropriate user can access them. >> >> >> "Juttle" <Jut***@discussions.microsoft.com> wrote in message >> news:BDCA246F-2FD7-478A-9A96-3FB5E5A13FAE@microsoft.com... >> > Hi, >> > >> > Thanks for the reply. >> > >> > The individual users directorys are full use for user/administrator. >> > There >> > is a security issue as well, as the network is at a school for >> > disruptive >> > kids, therefore each user can only have access to his or her directory, >> > none >> > of the others. >> > >> > If I give 'Everybody' full access, won't that remove the security of >> > the >> > users directories? >> > >> > "Pegasus (MVP)" wrote: >> > >> >> >> >> "Juttle" <Jut***@discussions.microsoft.com> wrote in message >> >> news:73FD8F6B-4A24-4747-90E7-3EA2125A3485@microsoft.com... >> >> > Hi, All, >> >> > >> >> > Apologies if this is going over old ground, but this server admin >> >> > stuff >> >> > is >> >> > all new to me! >> >> > >> >> > My users are having a problem saving to their individual directories >> >> > on >> >> > a >> >> > shared drive on our W2K server. >> >> > >> >> > Windows 2000 server used purely as a file server. >> >> > >> >> > c:\ has a shared directory for all user files. The shared directory >> >> > has >> >> > full >> >> > use permissions set. >> >> > >> >> > Permissions for the users directories is set as >> >> > user/Administrator/full >> >> > control >> >> > >> >> > No inherited permissions >> >> > >> >> > Workstations are XPPro >> >> > >> >> > Each has a user account set as 'limited' on the XP Workstations >> >> > >> >> > Each has a 'Y' drive which is the shared directory on the server >> >> > >> >> > Users can access only their directory, but can't save anything to it >> >> > >> >> > Users with admin rights can access their directory but can't save to >> >> > it >> >> > >> >> > Logged in as admin can access and save to any directory >> >> > >> >> > Basically, if you're logged in as 'Administrator' you can do >> >> > whatever >> >> > you >> >> > like, which is as it should be, but logged in as any user other than >> >> > 'Administrator' whatever your level of control won't allow saving to >> >> > the >> >> > shared network drive 'Y' >> >> > >> >> > It's got to be something simple and I'm probably having a 'senior' >> >> > moment >> >> > but right now it's giving me sleepless nights! >> >> > >> >> > All and any help gratefully received! >> >> > >> >> > Cheers, All >> >> > >> >> >> >> So far you have set the NTFS permissions for the user folders. >> >> You must now set the permissions for the Shares to "Full access >> >> for everyone". >> >> >> >> Note that it's not a good idea for user shares to reside on the >> >> system drive. They should be on a dedicated data drive. >> >> >> >> >> >> >> >> >> Hi, Again,
OK, I'll get the file back to you ASAP. The school is on some kind of break at the moment, so I can't get to the server. As soon as I can I'll get back to you. Cheers, Show quoteHide quote "Pegasus (MVP)" wrote: > Let's have some hard evidence for this. > > 1. Log on as administrator on the server, open a Command > Prompt and type this command: > cacls c:\Students\SomeUser > c:\server.txt > net share "Students" >> c:\server.txt > Replace "Students" with the correct share name of the > student's share. > > 2. Log on as SomeUser on a workstation, open a Command > Prompt and type this command: > net user "%UserName%" /domain > c:\server.txt > cacls "X:\%UserName%" >> c:\server.txt > dir "X:\%UserName%" 1>>c:\server.txt 2>>&1 > (Replace X: with the correct drive letter for the user share) > > Now include the contents of both files in your reply. > > > "Juttle" <Jut***@discussions.microsoft.com> wrote in message > news:80B5B57A-03AB-4598-A05A-20E438B65182@microsoft.com... > > Yes, that's how it it! > > > > If you look at the security on c:\Students, which is the shared drive, the > > permissions are full access for everyone. > > > > If you look at c:\Students\user, the security is set at full access for > > \user and Administrator. > > > > "Pegasus (MVP)" wrote: > > > >> There are two sets of permissions: > >> a) Those you have already set for ***folders***. > >> b) Those that are set for ***shares***. > >> > >> You should set the ***share*** permissions to "Full > >> access for everyone", and the ***folder*** permissions > >> so that only the appropriate user can access them. > >> > >> > >> "Juttle" <Jut***@discussions.microsoft.com> wrote in message > >> news:BDCA246F-2FD7-478A-9A96-3FB5E5A13FAE@microsoft.com... > >> > Hi, > >> > > >> > Thanks for the reply. > >> > > >> > The individual users directorys are full use for user/administrator. > >> > There > >> > is a security issue as well, as the network is at a school for > >> > disruptive > >> > kids, therefore each user can only have access to his or her directory, > >> > none > >> > of the others. > >> > > >> > If I give 'Everybody' full access, won't that remove the security of > >> > the > >> > users directories? > >> > > >> > "Pegasus (MVP)" wrote: > >> > > >> >> > >> >> "Juttle" <Jut***@discussions.microsoft.com> wrote in message > >> >> news:73FD8F6B-4A24-4747-90E7-3EA2125A3485@microsoft.com... > >> >> > Hi, All, > >> >> > > >> >> > Apologies if this is going over old ground, but this server admin > >> >> > stuff > >> >> > is > >> >> > all new to me! > >> >> > > >> >> > My users are having a problem saving to their individual directories > >> >> > on > >> >> > a > >> >> > shared drive on our W2K server. > >> >> > > >> >> > Windows 2000 server used purely as a file server. > >> >> > > >> >> > c:\ has a shared directory for all user files. The shared directory > >> >> > has > >> >> > full > >> >> > use permissions set. > >> >> > > >> >> > Permissions for the users directories is set as > >> >> > user/Administrator/full > >> >> > control > >> >> > > >> >> > No inherited permissions > >> >> > > >> >> > Workstations are XPPro > >> >> > > >> >> > Each has a user account set as 'limited' on the XP Workstations > >> >> > > >> >> > Each has a 'Y' drive which is the shared directory on the server > >> >> > > >> >> > Users can access only their directory, but can't save anything to it > >> >> > > >> >> > Users with admin rights can access their directory but can't save to > >> >> > it > >> >> > > >> >> > Logged in as admin can access and save to any directory > >> >> > > >> >> > Basically, if you're logged in as 'Administrator' you can do > >> >> > whatever > >> >> > you > >> >> > like, which is as it should be, but logged in as any user other than > >> >> > 'Administrator' whatever your level of control won't allow saving to > >> >> > the > >> >> > shared network drive 'Y' > >> >> > > >> >> > It's got to be something simple and I'm probably having a 'senior' > >> >> > moment > >> >> > but right now it's giving me sleepless nights! > >> >> > > >> >> > All and any help gratefully received! > >> >> > > >> >> > Cheers, All > >> >> > > >> >> > >> >> So far you have set the NTFS permissions for the user folders. > >> >> You must now set the permissions for the Shares to "Full access > >> >> for everyone". > >> >> > >> >> Note that it's not a good idea for user shares to reside on the > >> >> system drive. They should be on a dedicated data drive. > >> >> > >> >> > >> >> > >> > >> > >> > > >  
Thread options
|
|||||||||||||||||||||||
