Access is denied for shared folder

We have recently addedd two Windows 2003 servers to our
domain after an upgrade of AD. Both Windows 2003 servers
have been promoted to a DC.

When you create a shared folder, any user, no matter if
they have full control in security of the folder, gets
an "Access is denied" when you try to write to the folder
from the network. There is no problem writing to the
folder from the server or if you access it through an IPC
share, those methods don't create the error

One thing I noticed is that the Read-Only attribute for
ever folder on the server has a grey filled check mark.
If you clear the check mark, click ok, then look at the
properties of the folder again, the check mark is back.
If do an attrib on the folder, it shows no attributes set.

Any ideas?

Thanks.


Jeff Howad

You are bumping up against inherited permissions. Child
folders inherit the permissions of the parent folder. You
need to add write privileges to the child, change the
parent, or create a new OU/User Group with the permissions
your users require.



>-----Original Message-----
>We have recently addedd two Windows 2003 servers to our
>domain after an upgrade of AD. Both Windows 2003 servers
>have been promoted to a DC.
>
>When you create a shared folder, any user, no matter if
>they have full control in security of the folder, gets
>an "Access is denied" when you try to write to the folder
>from the network. There is no problem writing to the
>folder from the server or if you access it through an IPC
>share, those methods don't create the error
>
>One thing I noticed is that the Read-Only attribute for
>ever folder on the server has a grey filled check mark.
>If you clear the check mark, click ok, then look at the
>properties of the folder again, the check mark is back.
>If do an attrib on the folder, it shows no attributes set.
>
>Any ideas?
>
>Thanks.
>.
>

Hi Jeff,

The issue may be caused by the ACL of the folder is corrupted.

Let's create a new folder and share it. Then, use the subinacl.exe to reset
the ACL of the folder to default.

Note: the subinacl.exe is a Resource Kit utility. It's not free for
download.

Thanks for using Microsoft News Group!

Sincerely,

Steven Liu

Microsoft Online Partner Support

MCSE 2000

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Thanks Steve. I wasn't familiar with the utility!

>-----Original Message-----
>Hi Jeff,
>
>The issue may be caused by the ACL of the folder is
corrupted.
>
>Let's create a new folder and share it. Then, use the
subinacl.exe to reset
>the ACL of the folder to default.
>
>Note: the subinacl.exe is a Resource Kit utility. It's
not free for
>download.
>
>Thanks for using Microsoft News Group!
>
>Sincerely,
>
>Steven Liu
>
>Microsoft Online Partner Support
>
>MCSE 2000
>
>Get Secure! - www.microsoft.com/security
>
>This posting is provided "as is" with no warranties and
confers no rights.
>
>.
>

Hi Kevin,

After you have installed the Windows 2000/2003 Resource Kit on the server,
you can use the subinacl.exe.

You can run "suninacl.exe /?" to get the detail help about how to use the
utility.

Thanks for using Microsoft News Group!

Sincerely,

Steven Liu

Microsoft Online Partner Support

MCSE 2000

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.