Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Permission Puzzle: Can't Exclude User but Allow Others to Access

10 Jan 2014   #31
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by tobor8thman View Post
User accounts 5 and 6 are not on the same PC as the four folders. The PC which has folders 1-4 is a PC running Windows 8.0 Pro. User accounts 5 and 6 are on a separate networked PC in Workgroup running Windows 7.0 Professional.
But how authenticates useraccount5 itself to the win8 pro share? Anonymous?


My System SpecsSystem Spec
.
10 Jan 2014   #32
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

on win8 pro machine (with the user folder 1-4 shares) : Password Protected Sharing - Turn On or Off in Windows 8
Works?
My System SpecsSystem Spec
10 Jan 2014   #33
tobor8thman

Windows 7 Professional 32 bit
 
 

Quote   Quote: Originally Posted by Kaktussoft View Post
Go to Control Panel > Network and sharing center > Change advanced sharing settings > Enable Turn ON password protect sharing option

Turn it ON for your current profile, which is HOME I think(?) or was that setting already on? Was profile HOME? If setting is OFF ... nobody has to enter password and logs on to share as GUEST.

User5 and User6 have to logon to the server.... otherwise server doesn't know who is who.
Ok, I did all the above and I determined that user accounts 5 and 6 are logging on as Guests and not under their user account names, so your observation that the Win 8 Pro PC acting as server could not identify them was on target. I checked that users accounts 5 and 6 exist on the PC server running Win 8 Pro with the same password as they have on the Workgroup PC. I then turned on password protection on the Win 8 Pro PC (it was off, I thought it was on) and logged off user accounts 5 and 6 and then logged back on. Both accounts were denied access. I am not sure how to configure the share and NTFS permissions after that.

I did check Computer Management/Shared Folders/Sessions and Opened Files and only saw Administrator, Administrators and Homegroup listed.
My System SpecsSystem Spec
.

10 Jan 2014   #34
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

useraccounts 1-4 can still access all you want?

user account 6 access denied. So logged on succesfully? Assume it's connected to usershare1. What are share permissions? What are NTFS permissions of that folder?

Try to logon with useraccount6 on win8 pro. Can it access usershare1 folder?
My System SpecsSystem Spec
10 Jan 2014   #35
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

On #1 you see the shares are accessible by EVERYONE (FULL CONTROL). Also some extra permissions that are of no use. EVERYONE may everything.

The real protection will be done by NTFS. That's the normal way a system administrator manages it. For NTFS permissions....try to avoid explicit DENY permissions. DENY permissions are very difficult to manage.
My System SpecsSystem Spec
10 Jan 2014   #36
tobor8thman

Windows 7 Professional 32 bit
 
 

Whew! I think we are nearing the end and turning the corner. I have followed your guidance and made a chart/matrix so that everyone in the forum could easily follow. Can you tell me if this matrix which I included below looks like it would work. Please look first at the notes at the bottom of the matrix. The permissions settings for the "J" drive I believe are the default settings, so I didn't change those. I also deleted the "Parent" folder that you saw in #1 above.

I also don't understand what the difference is between "Administrators" and "Administrator." Thanks.

My System SpecsSystem Spec
11 Jan 2014   #37
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

It looks like you shared the J drive and all its subfolders to EVERYONE. The NTFS permission of J root folder look like the default. It's just like they formatted a new local drive and use it. So EVERYONE can access J:\gfhnfgfghn\fdbdf\subfolder2 as well!

All Administrators on file server and HOMEGROUP can use the folder1-4 share. SYSTEM, Administrators, Administrator and HomeUsers have full control.

All Administrators on file server and EVERYONE can use the folder5 share. SYSTEM, Administrators, Administrator and HomeUsers and useracct6 have full control.

Administrators is a group and holds all accounts that have admin rights. Administrator is a real account .... the built-in admin account.

Why is whole J drive shared?

If PC1-4 is using USER6 ... it can still access folder5!

Is it working as expected now?
My System SpecsSystem Spec
20 Jan 2014   #38
tobor8thman

Windows 7 Professional 32 bit
 
 

Sorry, I have been away on business and could not work on the server for about a week.

J drive is no longer shared, and I put in all the changes you recommended, but at the end of the day I have to put "Everyone" in the permissions of each file (files 1-4) in order to give access to User Accounts 1-4 and 6 but when I do that, User Account 5 gains access too (which I don't want him to have) (see chart at #36 above). If I remove "Everyone" from the NTFS Permissions, then no one has access.
My System SpecsSystem Spec
21 Jan 2014   #39
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by tobor8thman View Post
Sorry, I have been away on business and could not work on the server for about a week.

J drive is no longer shared, and I put in all the changes you recommended, but at the end of the day I have to put "Everyone" in the permissions of each file (files 1-4) in order to give access to User Accounts 1-4 and 6 but when I do that, User Account 5 gains access too (which I don't want him to have) (see chart at #36 above). If I remove "Everyone" from the NTFS Permissions, then no one has access.
Hoe is useraccount1 logging on? sure he doesn't appear as GUEST?

Logon as useraccount1 to server yourself interactively... can you access the folders and read/write?
My System SpecsSystem Spec
22 Jan 2014   #40
tobor8thman

Windows 7 Professional 32 bit
 
 

Quote   Quote: Originally Posted by Kaktussoft View Post
Quote   Quote: Originally Posted by tobor8thman View Post
Sorry, I have been away on business and could not work on the server for about a week.

J drive is no longer shared, and I put in all the changes you recommended, but at the end of the day I have to put "Everyone" in the permissions of each file (files 1-4) in order to give access to User Accounts 1-4 and 6 but when I do that, User Account 5 gains access too (which I don't want him to have) (see chart at #36 above). If I remove "Everyone" from the NTFS Permissions, then no one has access.
Hoe is useraccount1 logging on? sure he doesn't appear as GUEST?

Logon as useraccount1 to server yourself interactively... can you access the folders and read/write?
I determined that the user accounts were not identified and were logging on as GUEST (see #33 above). But when I put password protected sharing on, it would not let them log on (again, see #33 above).

That's a good troubleshooting idea to try logging on with the user account on the remote PC, while you are at the remote PC . Maybe the problem is with the user account passwords not being similar. I will get back to you when I have a chance to test it.

Thanks for hanging in there!
My System SpecsSystem Spec
Reply

 Permission Puzzle: Can't Exclude User but Allow Others to Access




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
you don't currently have permission to access this folder
Hello, I am on my Laptop, i have 3.5 IDE Hard Disk which is quiet few years old, my some Pictures and data is stored on it, now i am looking for few pictures of mine, and few notepads, i try to connect it on my laptop by using 3.5 hard drive ide enclosure caddy. problem is i keep getting ''you...
General Discussion
You don't currently have permission to access this folder
Hi, Im having trouble accessing an external hard drive. It says this when i try to access C:\Users i can view the rest of the hard drive though. When i go to change ownership it goes through the files and gets stuck on one particular file 3/4 times now and wont get past the one folder. Any...
General Discussion
I don't have permission to access my C drive!
On my new win7 home 64bit system I wanted to share my drives so that it would work with my other winxp computer as well so I used the trick of assigning permission to "Everyone" on all my drives. This worked great (better than the homegroup). However today I decided it wasn't a great idea to share...
Network & Sharing
appropriate permission to access
In the attempt to run the setup of a program I get this: “Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item.” I am the administrator. Usually, by right clicking the mouse, and selecting run as administrator, this...
Installation & Setup
Windows can't access file. May not have permission to access.
Hello, I am attempting to access an application.exe file on my desktop. Each time that I click on it the Windows message, "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." pops up. I am the system administrator so this...
General Discussion
Permission&Access&User Acount Woes
Permission is just my newest trouble! My computer crashed some weeks ago, & I never received a solution; I have Windows 7 Home Premium on, 32 bit, on a Toshiba Satellite laptop. It replaces one that was stolen from me; no frills is fine, but I have had many troubles! I am in exams online in...
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 10:35.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App