Troubleshooting Access to Files and Shared Folders


Objective:

Troubleshoot access to files and shared folders

As you saw in the previous section, share permissions, not just NTFS permissions, can prevent access to a file or folder. However, the problem of a user having too much access to data can be an even more severe problem. For example, how many people in your organization need to know the salaries of the IT staff?

Most access problems are caused by simple things, such as bad passwords or incorrectly configured permissions. For example, does the user who is having problems accessing the file or shared folder have the necessary permissions for proper access? Is the user a member of a group that has been denied access to the file or shared folder? Remember that Deny has precedence over a granted permission.

When you're tracking down permissions problems, sometimes creating a new user account can be a good troubleshooting aid. Does the new user account fail in the same way as the existing ones? The Effective Permissions tool can be helpfulup to a point. Because share permissions are not included in effective permissions calculations, the Effective Permissions tool can be used to verify that you are obtaining the desired results from the NTFS permissions, but you will still need to analyze the combination of share and NTFS permissions.

Challenge

You are the administrator of a network that includes multiple servers running Windows Server 2003 for file and print services. The Human Resources Department wants to have its files stored on one of your servers, but it doesn't want anyone outside the group to have access to them. The users in the HR department will not be logging on to the server, but they need to access the files over the network. They want you to set this up for them.

What is the best way to solve this issue in Windows Server 2003? On your own, try to develop a solution that would involve the least amount of downtime.

If you would like to see a possible solution, follow these steps:

1.

Open either My Computer or Windows Explorer. Navigate to the volume where you want to create a folder.

2.

Create a folder and name it HR.

3.

Right-click the folder and select Sharing and Security from the pop-up menu.

4.

On the Sharing tab of the HR Properties dialog box, select the Share This Folder option, and accept the default share name of HR.

5.

Click the Permissions button. The Permissions for HR dialog box appears.

6.

Click the Add button. From the Select Users, Computers, or Groups dialog box, enter the HR group. Click the OK button to save.

7.

Back at the Permissions for HR dialog box, make sure the HR group entry is highlighted and then click the Full Control check box.

8.

Highlight the Everyone entry and then click the Remove button.

9.

Click OK. Then click OK again on the HR Properties dialog box to save.

One of the key things to remember when creating a shared folder is that the Everyone group is given Read permission by default. For greater security, you should always remove this group as you add permissions for specific groups.





MCSA. MCSE 70-290 Exam Prep. Managing and Maintaining a MicrosoftR Windows ServerT 2003 Environment
MCSA/MCSE 70-290 Exam Prep: Managing and Maintaining a Microsoft Windows Server 2003 Environment (2nd Edition)
ISBN: 0789736489
EAN: 2147483647
Year: 2006
Pages: 219
Authors: Lee Scales

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net