Help with mapped drives and XP AV 2008

I believe "Make Private" takes action on the NTFS permissions of the folder.
Saying that, I fear that someone will immediately jump to the conclusion to
add <Everyone> Read/Write.
I do hope it is not necessary (security issue) and some other setting will suffice, but I need to keep
an appointment in 30mins so I have to run.

thnx Joe, and will wait yoru reply and any others, as this issue , now that I know what caused it, wil lhopefully get corrected soon.

OK. Whatever got you into the problem, i think this should get you out. (Am also guessing, as jobeard mentions, making it private changed permissions giving you this net effect)

To fix this, suggest turn off Simple File Sharing from Explorer (i mentioned in earlier post.) Uncheck the box, OK. Then reboot

When back up you

• Should be able to see Share and Security tabs for problem folders
• Adjust permissions on each as needed (remembering its the most restrictive of the two which applies to a network access, just Security if local access)
• If you need remote access (sounded like did), since you're using Simple File Sharing Guest is the narrowest access you can allow. Be sure you see that Guest allowed on both the share and security permissions tab
• When done with changes, switch it and reboot back into Simple File Sharing.

just fyi, should you find it helpful, you can use Accesschk tool to get handy display of Security (NTFS) permissions (it doesn't apply any share permissions). You choose between a list of accounts with access to a file/folder (e.g. accesschk “C:\Program Files”) or have it list the account permissions for each object in a file/folder (e.g. accesschk joe “C:\Program Files”)

I like it

Here's an example, assuming AccessChk resides in your Desktop\accesschk folder (seeming that's where it extracted to!)

Example:

cmd /k "%userprofile%\Desktop\accesschk\accesschk.exe" /accepteula Administrator <path>

Please change <path> to a specified folder, like C:\Windows

So from Start-->Run-->
You would copy the run line: cmd /k "%userprofile%\Desktop\accesschk\accesschk.exe" /accepteula Administrator c:\windows
Then press ok
Which would open a command prompt, then show only RW (Read\Write) access to all files inside C:\Windows

I haven't exactly worked out how to check every folder from C Drive on the entire disk at once, because the "-D" option (check Directory only) I can't get to work!, except on one folder only ie:
Start-->Run--> cmd /k "%userprofile%\Desktop\accesschk\accesschk.exe" /accepteula -d Administrator c:\windows

Edit:

I did it !

Start->Run-> cmd /k "%userprofile%\Desktop\accesschk\accesschk.exe" /accepteula -d -s Administrator c:\
This checks every folder on the entire of C Drive for Read/Write access

Edit2:

If you add -n it only shows the folders that don't have Read/Write access (but checking the entire of C Drive takes a while, so you might not see anything in the command prompt window for a while)

cmd /k "%userprofile%\Desktop\accesschk\accesschk.exe" /accepteula -d -s -n Administrator c:\

Edit3:

Actually after all this I like AccessEnum better !
.

But you were really getting into accesschk there for awhile!


I think one good way to use accesschk is figuring out Access Denied" when file sharing.

Once you rule out network issues and logon authentication, you finally have to arrive at permissions. There's two tabs on Properties of a shared object
- Share (which defines the share permissions)
- Security (which defines NTFS permissions)

Is generally straight forward to understand share permission and how it applies to a userid

Often not so easy for security permissions. So just run accesschk for the userid in question and let it list everything it can access for you

Ok,
I found out what the issue is, hopefully, and maybe someone can steer me in the right direction. I noticed, after doing all the steps that Lookinaround told me to do, that the folders we are having issues with, are both marked Make Private, in the properties area for sharing. This happened when the boss added a password to his account, and made it private. After I had him undo his password, reboot, then repassword it, I figured it woudl make it public, but it hasnt. any way to go into registry and unmark that folder as private?

Well, I want to thank everyone for reading and responding to my issues here. I ended up adding the Everyone user, and that gave all the other computers access to those 2 folders, so life is grand again here in the office. Thanks and will have to hang around more offtne and see if I can help people with their issues.

Making a folder "private" just causes XP to modify its permissions and i'm guessing your problem still revolves around permissions. I believe making it private removes all permissions except for owner. In fact, it probably also removes folder sharing as well. Probably, also an issue of "inheritance" so may need look at objects within the folder as well.

Suggest you look at folder NOT in Simple File Share mode so you can see both Share and Security.
1. Check Security permissions. Probably need start by giving Full Control to Admin Group
2. Check if sharing is on or not tho i'd first get local access permissions working before adding sharing back in
3. Verify Security permissions by either

• using the accesschk tool i posted before to verify access by user or check invidiual permissions
• Or from command prompt enter: cacls "folder name"
• Or effective permissions tab under Security tab to tell you the right assigned the user or group you indicate

And look at this link Establish the correct file-sharing permissions in Windows XP
and related links it supplies should help understand permissions issues.. but feel free to post back with questions as needed

by the way, can you get to that folder at all? if easier, see if copy the contents to a new folder you create makes an easier

/************* EDIT *********************/
And just in case, another approach would be taking ownership
- How to take ownership of a file or folder in Windows XP
- How to set, view, change, or remove special permissions for files and folders in Windows XP

Sharing vs NTFS permissiones

XP Pro users without a Domain Controller environment (ie almost all non-commercial home users),
should elect the Simple File Sharing model

My Computer -> click Tools -> Folder Options
slide to the bottom
check [+] Use Simple File Sharing (recommended)

This model greatly 'simplifies' the process and makes your life far more pleasant
(hence the name )

Alter the Guest Account and set a password, then disable the account.
You will then not need to add all of your users to every system with shares.

NTFS settings can get compounded quickly, but when done correctly, give a fine grain control over who gets to do what to whom.

This article will help you understand NTFS better