|
|
Here's my situation: SBS2003 as DC, I create a new user and assign membership
to the Mobile Users Group and Domain Users. On a subfolder of a shared
folder, I deny access to this user. I login via RAS and am able to view,
add, delete, whatever, to the folder I'm trying to deny access to. How can I
deny access of specific folders to a RAS client?
--
Mike S.
|
|
This _should_ happen the same for a RAS user as a local, I would suggest
using a local workstation logged on as the RAS user and attempting same.
The one thought that occurs to me is that the 'deny' permissions may not
have been propogated down through the folder tree. This gets a bit tricky if
the hierarchy has various permissions (rather than all things inheriting
from parent). Does this inspire any thoughts?
"Mike_S" <MikeS[ at ]discussions.microsoft.com> wrote in message
news:64B4454F-E706-4FFA-8ED4-1D4D4D6F7AD5[ at ]microsoft.com...
[Quoted Text] > Here's my situation: SBS2003 as DC, I create a new user and assign
> membership
> to the Mobile Users Group and Domain Users. On a subfolder of a shared
> folder, I deny access to this user. I login via RAS and am able to view,
> add, delete, whatever, to the folder I'm trying to deny access to. How
> can I
> deny access of specific folders to a RAS client?
> --
> Mike S.
|
|
Hello Mike,
Thank you for posting here.
According to your description, I understand that:
When the user connect to the domain with VPN connection, he will be able to
access the shared folder that has explicit deny permission.
If I have misunderstood the problem, please don't hesitate to let me know.
Suggestions:
====================
First of all, please make sure that no previous passwords are stored on the
problematic computer. A stored password will be presented when you a remote
user access the shared folder. To check that:
1) Click Start, click Run, type "control userpasswords2" (without the
quotation marks), and then click OK.
2) Click the Advanced tab.
3) Click the "Manage Password" button.
4) Check to see if these domain account's passwords are stored. If so,
remove them.
5) Check if the problem has been resolved now.
If the issue persists, please double check the permission on the folder to
make sure the user has been granted deny permission explicitly.
I hope these steps will give you some help. If you have any questions or
concerns, please do not hesitate to let me know.
Best regards,
Miles Li
Microsoft Online Partner Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
|
|
Yes, there was a stored password for the user 'administrator'. Strange it
uses the stored password instead of the one you're logging in with. Thanks
again.
--
Mike S.
"Miles Li [MSFT]" wrote:
[Quoted Text] > Hello Mike,
>
> Thank you for posting here.
>
> According to your description, I understand that:
>
> When the user connect to the domain with VPN connection, he will be able to
> access the shared folder that has explicit deny permission.
>
> If I have misunderstood the problem, please don't hesitate to let me know.
>
> Suggestions:
> ====================
> First of all, please make sure that no previous passwords are stored on the
> problematic computer. A stored password will be presented when you a remote
> user access the shared folder. To check that:
>
> 1) Click Start, click Run, type "control userpasswords2" (without the
> quotation marks), and then click OK.
> 2) Click the Advanced tab.
> 3) Click the "Manage Password" button.
> 4) Check to see if these domain account's passwords are stored. If so,
> remove them.
> 5) Check if the problem has been resolved now.
>
> If the issue persists, please double check the permission on the folder to
> make sure the user has been granted deny permission explicitly.
>
> I hope these steps will give you some help. If you have any questions or
> concerns, please do not hesitate to let me know.
>
>
>
> Best regards,
> Miles Li
>
> Microsoft Online Partner Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
|
|
|