Home > IT Answers > Microsoft Windows > Access to share using local account
Help

Question

  Asked: Apr 15 2008   9:41 AM GMT
  Asked by: SMACHEAD

Access to share using local account


Domain Server, Windows Server 2003, User permissions, Network connectivity

Have a W2003 server, part of our domain, whose shares are only accessible using domain IDs.
A local ID on the server given suitable access rights to a share can't attach remotely, using the same credentials.
Even local admins can't access remotely even to Admin$, IPC$, C$ or other created shares.
Other 2003 servers using this scenario are ok.
Comparison to a satisfactory server using Gpedit, services, share & directory permissions haven't revealed anything.

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window
Help

Answer Wiki (Improve, edit or add to this answer)

IMPROVE THIS ANSWER
View History
 RATE THIS ANSWER
-1
Click to Vote:
  •   0
  •  -1
Last Answered: Apr 16 2008  3:20 PM GMT  by KarlG




IS this machine a dc? Is it a small business server? Have you "hardened" the server?

logged into the server locally as a local admin can you see the shares via \\127.0.0.1 ?

Can you access them? Can you access \\127.0.0.1\c$ from the local machine logged in as a local administrator?

Are the non domain users on another domain? Have you configured security between the two domains?

If you create your own shares can you delegate security to non domain users and access it or not?

Come back and update this and I will do my best to help you out!
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Microsoft Windows and Networking.

Looking for relevant Microsoft Windows Whitepapers? Visit the SearchWinIT.com Research Library.


RSS - Discussions Help

Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

SMACHEAD  |   Apr 21 2008  11:42AM GMT

Thanks KarlG
It’s a member server, Standard Edition 2003 SP2. upto date with MS patches
What do you mean by ‘hardened’ ?
Yes can see shares using 127 & newly created shares are visible when logged on locally at the server.
We have only one domain.
Non domain users can’t be delegated access - on other similar servers we can add a local ID on the server, give it suitable access to the share, create an ID with the same ID/password on a PC then access the server share remotely from the PC using the same ID & password.

Hope this helps & thnks for any help