Solved Admin cannot edit in a network shared folder

[malteseguy]

Hi to All;

This is my first post here although I have visited many times to look for answers to various problems.

I was about to prepare a simple sharing exercise for a class I teach and had to think twice about the exercise as I encountered a curious thing.
Basically, I have a Win 7 installed in a VM with network enabled and connected. I have three accounts on this installation, testAdmin (Administrators), testAC (member of Guests) and an account testEmp which is a member of a group I created called Employees. Logged in as testAdmin I created a folder in C: called MyShare and copied a sample picture in it. Then I shared the folder through Advanced sharing and added the relevant groups under Share permissions giving the Administrators full control, Guests: deny read and Employees: Read only allowed.

Then I logged off as testAdmin and logged on using both other accounts to check the settings. I browsed to the Network folder under Windows Explorer and everything worked as expected. When I logged on as testAdmin again and tried to access the same folder under Network, therefore //Wini7VM/MyShare, I could open the sample picture but could not edit it. I also could not delete the picture.

What is curious is that if I obviously opened the folder as a local folder in C: using testAdmin I could edit, add or change things without problems.

I also experimented with folder security to give the same rights to the various users as I did under Advanced sharing but the same results were obtained.

It is a little curiosity I wish to find an answer to if some good soul can help. Thank you.

 

[GokAy]

Ok, after some Googling and some experimentation in VirtualBox I guess I have solved it. May still need some more cracking but looks promising for now

It is about UAC (Group Policy setting - User Account Control: Run all administrators in Admin Approval Mode - set to disable).

You can read about it here - http://clintboessen.blogspot.ca/2013/05/you-dont-currently-have-permission-to.html

1- Change Local Security Policy and restart
2- Make sure your shared folder is not in a user profile, further complicates with NTFS permissions. I shared in root of C.
3- Remove Everyone, add your groups and assign the share permissions

I didn't try the Guest account. You can't browse to the shares without credentials anyway. At least with Everyone removed (includes Guest).

I will try with Home Premium now, as it doesn't have gpedit.msc by default(?).

--------------

Also I find it easier to browse from my Host PC, rather then logging on and off with Guest OS. If you close Windows Explorer and run in cmd: net use * /d
then you will reset the connections and will be asked credentials again without re-logging. Sometimes you have to wait some seconds to make it work though.

 

[GokAy]

Oh well, I guess I won't bother with Home Premium as it doesn't allow Local Users and Groups or Group Policy.

 

[malteseguy]

Thanks for the help.

Everything worked after the necessary changes where made.