Can't open domain icon in network places.

[sundog]

I have installed server 2003 with active directory. When I login as
administrator on the server I can browse the network and when I double click
on the domain it then shows all the shared folders, all is fine. When I
login to the domain on an XP pro client and do the same thing the
workstation says that I do not have rights to browse below the domain
object. If I use the add network places wizard to access the shares
everything goes fine. I then added the user to the administrators group,
still no go. How can that not work? It even fails when I login into the
client as administrator. There is clearly something here which I don't
understand. So here are my questions.



Do users need special rights to browse the domain even though they already
have mapped a drive and are sharing data?



Is browsing different the accessing a shared folder?



Why can administrator do this when logged into the server but not on the XP
client?



Are the rights for administrator different when logged into a client vs. the
server?



I have been looking all over the place on the net but just have not found
the answer. If there is a faq or other doc which I need to read please
point me to it.



Thanks in advance.

 

[ptwilliams]

I don't know all the answers to your questions at present, so I'll just
answer those I do...

"Do users need special rights to browse the domain even though they

already have mapped a drive and are sharing data?"

Hmmm, that depends on what you mean. Network browsing (entire network in
NetHood) requires certain rights based on what permissions have been set on
a). the share permissions and b). the DACL of the shared folder (not
applicable without NTFS), e.g. some shares will not grant you access.

"Is browsing different the accessing a shared folder?"

Yes. Browsing requires several services be running, and requires NetBT
(NetBIOS over TCP/IP).
Accessing a share simply uses the Workstation and Server services.

"Why can administrator do this when logged into the server but not on the

XP client?"

Don't really know? Is the XP box a domain member? If not, try disabling
Simple File Sharing by going to Tools\Folder Options\View and unchecking Use
Simple File Sharing (on any Windows Explorer window).

"Are the rights for administrator different when logged into a client vs.

the server?"

Nope. At least, not unless you configure this. Administrator is a member
of the administrators group -these are all powerful, and have the same
rights on all boxes with the same security template configurations. It is
possible to modify these rights, but this wont be the case by default.


Hope this helps,



Paul.
______________________________