Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Old SBS 2003 (32) server/DC, new Win7Pro (64) client joined to domain. Server has been happily talking to old XP clients. New Win7 client happily talks to server, for the most part... but for some reason, it refuses to access one particular share.

This share is accessible by the same user account from an XP machine just fine, and I even changed the ACL of the funky share to match exactly the one that works, but it still doesn't work. This funky share is the "Users Shared Folders" folder on the server (shared as \\server\Users), so it's kind of important it be accessible.

The funky share is visible to the client from net view \\server, and I can net use u: \\server\users, but at the point I go to use it, I get

client>u:
Access is denied.

(yes, I know the ACLs that follow are ridiculously open and redundant, kind of the point; it should work, right?)

On server, sharing for both shares is just Everyone->Full Control; I'm depending on the file/folder security settings for simplicity.

ACLs are identical for the root folders of the two shares.

Share that works fine, from server:

server>icacls \\server\data
\\server\data BUILTIN\Administrators:(OI)(CI)(F)
              CREATOR OWNER:(OI)(CI)(IO)(F)
              Everyone:(OI)(CI)(F)
              NT AUTHORITY\SYSTEM:(OI)(CI)(F)
              BUILTIN\Users:(OI)(CI)(IO)(F)
              BUILTIN\Users:(RX)

Successfully processed 1 files; Failed processing 0 files

Share that is funky, viewed from server:

server>icacls \\server\users
\\server\users BUILTIN\Administrators:(OI)(CI)(F)
               CREATOR OWNER:(OI)(CI)(IO)(F)
               Everyone:(OI)(CI)(F)
               NT AUTHORITY\SYSTEM:(OI)(CI)(F)
               BUILTIN\Users:(OI)(CI)(IO)(F)
               BUILTIN\Users:(RX)

Successfully processed 1 files; Failed processing 0 files

Share that works fine, viewed from client, also identical:

client>icacls \\server\data
\\server\data BUILTIN\Administrators:(OI)(CI)(F)
              CREATOR OWNER:(OI)(CI)(IO)(F)
              Everyone:(OI)(CI)(F)
              NT AUTHORITY\SYSTEM:(OI)(CI)(F)
              BUILTIN\Users:(OI)(CI)(IO)(F)
              BUILTIN\Users:(RX)

Successfully processed 1 files; Failed processing 0 files

Fail share, from client:

client>icacls \\server\users
\\server\users: Access is denied.
Successfully processed 0 files; Failed processing 1 files

Other things I've tried: * user is already in Administrators and Domain Admins * cranked UAC down to least secure setting (this and above confirmed with "whoami /groups") * updated network drivers (I've seen bad offload implementations cause really weird errors in specific cases before) * disabled SMB2 on client, not that it should be using it...

Still no joy. I thought between cranking down UAC and disabling SMB2 I got the major relevant differences from XP. Help!

share|improve this question
    
Either I failed to type a whole lot of double-backslashes, or the posting system reduced them to singles. Interesting. –  user56278 Oct 6 '10 at 12:38
    
Have you checked the event log for the Failed Access error message? If it doesn't appear there, try enabling auditing of failed access events and check again. –  Chris S Oct 6 '10 at 12:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.