Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I created a user ("backupagent") on a laptop running Windows 7 Home Premium, and added that user to the Administrators group, with a randomly-generated, difficult-to-guess password. My plan is to log into the machine over SMB to back up the files on the laptop (actually, BackupPC is doing this, but I can't seem to get this to work with smbclient on its own either).

I set up a windows share ("cback") on the laptop sharing the entire C: drive, and allowed backupagent all permissions on the share ("Read" / "Modify" / "Full Control").

When I log into the machine from my Linux box using "smbclient", I am able to access much of the filesystem, except for files under the "C:\Users\UserName" folder, which are of course the most important ones to back up. When I attempt to list the files in any directories contained in C:\Users\UserName, I get an error:

  smb: \Users\UserName\Desktop\> ls
  NT_STATUS_ACCESS_DENIED listing \Users\UserName\Desktop\*

Why is backupagent (a member of the Administrators group) unable to access these files? Windows permissions have always been completely bewildering to me...

share|improve this question

closed as off topic by Greg Askew, Ward, mdpc, Khaled, dunxd Feb 25 '13 at 14:37

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

At first there is no need to create any additional shares on the box. There is administrative share for drive c: - \\hostname\c$. Every user in Admin group is able to access it.
Another thing is that two "types" of permissions are in regards to the shares. First one is "share" itself. It is just who can access the share and who can connect to the share. And another one is NTFS ACLs. These are the main point of security configuration. NTFS permissions could be found on "Security" tab on folder properties. So in general you need to set Everyone "full control" for share permissions and granually grant permissions using NTFS ACLs.
In your particular case you need to check NTFS ACls on the files and folders you are trying to access.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.