'Access Denied' when mapping a drive

[Ray Greene]

I have two domains, DomainA and DomainB. DomainB has a permanent VPN
connection to DomainA.

I want DomainB users to be able to map a drive to a Windows 2000
server in DomainA.

My plan is to have a batch file for users to do this, using the
credentials of a DomainA user created specifically for this purpose.
This user is named UserX with a password of 'userx'. I want UserX to
have as few permissions as possible.

However I have found that connecting using the following command:

net use q: \\ServerX\FolderZ userx /useromainA\UserX

will only work when UserX is an administrator on ServerX. Anything
less will get an "Access Denied" error. This happens even when run
from DomainA.

I'm sure there should be something in Local Security Settings that
gives a user rights to map a drive, but I can't find it. What do I
need to do?

 

[Robert L [MS-MVP]]

assuming you don't setup trusts between two domains, you may want to create userx on the remote server.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
I have two domains, DomainA and DomainB. DomainB has a permanent VPN
connection to DomainA.

I want DomainB users to be able to map a drive to a Windows 2000
server in DomainA.

My plan is to have a batch file for users to do this, using the
credentials of a DomainA user created specifically for this purpose.
This user is named UserX with a password of 'userx'. I want UserX to
have as few permissions as possible.

However I have found that connecting using the following command:

net use q: \\ServerX\FolderZ userx /useromainA\UserX

will only work when UserX is an administrator on ServerX. Anything
less will get an "Access Denied" error. This happens even when run
from DomainA.

I'm sure there should be something in Local Security Settings that
gives a user rights to map a drive, but I can't find it. What do I
need to do?

 

[Ray Greene]

assuming you don't setup trusts between two domains, you may want to create userx on the remote server.

I tried creating userx on the server but had the same problem.

Trusts would really be the tidiest method. DomainB runs on Samba so
I'll have to dig out the howtos and see how to set that up.

 

[Robert L [MS-MVP]]

have you assigned the permission to the usera? Also can you map the drive is using remote site administrator logon id?

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com

assuming you don't setup trusts between two domains, you may want to create userx on the remote server.

I tried creating userx on the server but had the same problem.

Trusts would really be the tidiest method. DomainB runs on Samba so
I'll have to dig out the howtos and see how to set that up.

 

[Ray Greene]

My server was obviously a bit flaky, I rebooted it last night and now
mapping is working OK. Thanks for your help Bob and sorry to waste
your time.

 

[Robert L [MS-MVP]]

Thank you for the update. Post back with you have other question.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
My server was obviously a bit flaky, I rebooted it last night and now
mapping is working OK. Thanks for your help Bob and sorry to waste
your time.