- Mapped Drive Question
- Posted by Ron Sochanski on November 21st, 2007
On our corporate LAN, a user on a Windows XP machine logs into the machine
using the Novell Client for Windows. That user can then apparently map a
network drive on the machine for a Windows Server 3003 server using the the
same user name/password combo used to log into the machine, even though no
such account exists on the server. How can this be? Please advise.
- Posted by Ron Sochanski on November 21st, 2007
Make that Windows Server 2003.
"Ron Sochanski" wrote:
- Posted by Shenan Stanley on November 21st, 2007
Ron Sochanski wrote:
What are the share/file and folder permissions on the Windows [2]003 shared
folder?
--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
- Posted by Ron Sochanski on November 21st, 2007
On the Windows Server 2003 machine, the share permissions are:
Everyone: Allow Read
webdocs: Allow Full Control, Change, Read
(webdocs is the name of an account on the Windows Server 2003 machine.)
On the same machine, the file permissions are:
Administrators: All* (see below), Special Permissions
Creator Owner: Special Permissions*
System: All* (see below)
Users: Read & Execute*, List Folder Contents*, Read*, Special Permissions*
webdocs: All (see below)
* - greyed
"All" permiisions are Full Control, Modify, Read & Execute, List Folder
Contents, Read, Write
"Shenan Stanley" wrote:
- Posted by Shenan Stanley on November 23rd, 2007
Ron Sochanski wrote:
Shenan wrote:
Ron Sochanski wrote:
After said user maps the share - can they do anything on it?
Right now you have "Everyone" (which does not limit by domain - everyone
means... Everyone. Authenticated Users would mean "All authenticated domain
users"...) having read access to the share. Just because they can map it
does not mean they can actually do anything (list, read, execute, etc.)
Looking at your file permissions - it doesn;t look like a non-domain user
(unless they have a local machine account and the local machine account on
the computer from which they mapped the network drive from is exactly the
same in both places)
You need to set the "Share" and "File and Folder" permissions in such a way
that only those you desire to have access do and so that the administrators
can still get in to change such things too.
--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
