How are file permissions applied for shared drives?

Posted on

QUESTION :

I have two computers:

  • A (running Windows Vista)
  • B (running XP).

I shared C: on computer A (as \AC ), and require a username (X) plus pw to access it. If I browse the the share AC on computer B, after entering username+pw I can access most folders, but one folder “\ACUsersU” (i.e. the home folder of user U ) gives me “permission denied”.

I looked at that folder’s permissions on A, and it has full access permissons for all “Administrators”. I use the account “AX” to authenticate when accessing the share on A. X is a user account (on A) that is an “Administrator” according to Window’s user management.

Still, I cannot access this folder. If I explicitly add the “X” account to the accounts that may access folder F (under Properties / Security), I can access it without problems.

I do not understand why I need to explicitly grant permission for X to get access to F. Is it not enough that X is an Administrator account?

ANSWER :

It may not be enough – Generally being a part of the administrator group in windows 7 implies you can request administrator privileges, but the account doesn’t normally run with them (i.e., requires the UAC prompt to fully elevate to Administrator access). I would try either turning UAC off (I don’t really recommend this, as much as people hate it; UAC is actually a fairly decent security practice, and I’m glad to see Microsoft finally fixing their broken security model), or give your user account explicit read privileges (as you have discovered).

Leave a Reply

Your email address will not be published.