Users can't log in to sharted directory

[Guest]

Hi, All,

Apologies if this is going over old ground, but this server admin stuff is
all new to me!

My users are having a problem saving to their individual directories on a
shared drive on our W2K server.

Windows 2000 server used purely as a file server.

c:\ has a shared directory for all user files. The shared directory has full
use permissions set.

Permissions for the users directories is set as user/Administrator/full
control

No inherited permissions

Workstations are XPPro

Each has a user account set as 'limited' on the XP Workstations

Each has a 'Y' drive which is the shared directory on the server

Users can access only their directory, but can't save anything to it

Users with admin rights can access their directory but can't save to it

Logged in as admin can access and save to any directory

Basically, if you're logged in as 'Administrator' you can do whatever you
like, which is as it should be, but logged in as any user other than
'Administrator' whatever your level of control won't allow saving to the
shared network drive 'Y'

It's got to be something simple and I'm probably having a 'senior' moment
but right now it's giving me sleepless nights!

All and any help gratefully received!

Cheers, All

 

[Pegasus \(MVP\)]

Hi, All,

Apologies if this is going over old ground, but this server admin stuff is
all new to me!

My users are having a problem saving to their individual directories on a
shared drive on our W2K server.

Windows 2000 server used purely as a file server.

c:\ has a shared directory for all user files. The shared directory has
full
use permissions set.

Permissions for the users directories is set as user/Administrator/full
control

No inherited permissions

Workstations are XPPro

Each has a user account set as 'limited' on the XP Workstations

Each has a 'Y' drive which is the shared directory on the server

Users can access only their directory, but can't save anything to it

Users with admin rights can access their directory but can't save to it

Logged in as admin can access and save to any directory

Basically, if you're logged in as 'Administrator' you can do whatever you
like, which is as it should be, but logged in as any user other than
'Administrator' whatever your level of control won't allow saving to the
shared network drive 'Y'

It's got to be something simple and I'm probably having a 'senior' moment
but right now it's giving me sleepless nights!

All and any help gratefully received!

Cheers, All

So far you have set the NTFS permissions for the user folders.
You must now set the permissions for the Shares to "Full access
for everyone".

Note that it's not a good idea for user shares to reside on the
system drive. They should be on a dedicated data drive.

 

[Guest]

Hi,

Thanks for the reply.

The individual users directorys are full use for user/administrator. There
is a security issue as well, as the network is at a school for disruptive
kids, therefore each user can only have access to his or her directory, none
of the others.

If I give 'Everybody' full access, won't that remove the security of the
users directories?

 

[Pegasus \(MVP\)]

There are two sets of permissions:
a) Those you have already set for ***folders***.
b) Those that are set for ***shares***.

You should set the ***share*** permissions to "Full
access for everyone", and the ***folder*** permissions
so that only the appropriate user can access them.

 

[Guest]

Yes, that's how it it!

If you look at the security on c:\Students, which is the shared drive, the
permissions are full access for everyone.

If you look at c:\Students\user, the security is set at full access for
\user and Administrator.

 

[Pegasus \(MVP\)]

Let's have some hard evidence for this.

1. Log on as administrator on the server, open a Command
Prompt and type this command:
cacls c:\Students\SomeUser > c:\server.txt
net share "Students" >> c:\server.txt
Replace "Students" with the correct share name of the
student's share.

2. Log on as SomeUser on a workstation, open a Command
Prompt and type this command:
net user "%UserName%" /domain > c:\server.txt
cacls "X:\%UserName%" >> c:\server.txt
dir "X:\%UserName%" 1>>c:\server.txt 2>>&1
(Replace X: with the correct drive letter for the user share)

Now include the contents of both files in your reply.

 

[Guest]

Hi, Again,

OK, I'll get the file back to you ASAP.

The school is on some kind of break at the moment, so I can't get to the
server. As soon as I can I'll get back to you.

Cheers,