Can't share folders

No one on our SBS network can share folders on their local drives. A
user can click on the folder, share it using Properties/Sharing, but
when another user tries to access the share through My Network Places he
gets the error message:

\\ComputerName is not accessible. You might not have permission to
access this network resource. Contact the administrator of this server
to find out if you have access permissions.

Logon failure: the user has not been granted the requested logon type at
this computer.

How do we grant appropriate permissions?

Merv
Fri Jul 11 09:33:03 PDT 2008

I suspect you need to set the Share Permssions to Everyone (FULL) and NTFS
(security tab) permissions to allow access for the appropriate domain users
(or the domain users group itself if everyone needs access to those
file/folders).

Having said that, shared files/folders belong on the server so that they can
be available 24/7 (without requiring the workstation to be continuously up
and running), so they can be backed up with the daily SBS server backup, and
so the appropriate level of security can be maintained.

--
Merv Porter [SBS-MVP]
============================

"Anon E. Mouse" <fake@fake.com> wrote in message
news:e9QY4l24IHA.5012@TK2MSFTNGP05.phx.gbl...
> No one on our SBS network can share folders on their local drives. A user
> can click on the folder, share it using Properties/Sharing, but when
> another user tries to access the share through My Network Places he gets
> the error message:
>
> \\ComputerName is not accessible. You might not have permission to access
> this network resource. Contact the administrator of this server to find
> out if you have access permissions.
>
> Logon failure: the user has not been granted the requested logon type at
> this computer.
>
> How do we grant appropriate permissions?

Cliff
Fri Jul 11 12:03:45 PDT 2008

I believe a security/permissions issue would throw a different error. That
sounds like a group policy setting to me. The security section of GP has
various access rights, and it sounds like users are not granted network
logon rights.

-Cliff

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:%23CHaNP34IHA.5060@TK2MSFTNGP02.phx.gbl...
>I suspect you need to set the Share Permssions to Everyone (FULL) and NTFS
>(security tab) permissions to allow access for the appropriate domain users
>(or the domain users group itself if everyone needs access to those
>file/folders).
>
> Having said that, shared files/folders belong on the server so that they
> can be available 24/7 (without requiring the workstation to be
> continuously up and running), so they can be backed up with the daily SBS
> server backup, and so the appropriate level of security can be maintained.
>
> --
> Merv Porter [SBS-MVP]
> ============================
>
> "Anon E. Mouse" <fake@fake.com> wrote in message
> news:e9QY4l24IHA.5012@TK2MSFTNGP05.phx.gbl...
>> No one on our SBS network can share folders on their local drives. A user
>> can click on the folder, share it using Properties/Sharing, but when
>> another user tries to access the share through My Network Places he gets
>> the error message:
>>
>> \\ComputerName is not accessible. You might not have permission to access
>> this network resource. Contact the administrator of this server to find
>> out if you have access permissions.
>>
>> Logon failure: the user has not been granted the requested logon type at
>> this computer.
>>
>> How do we grant appropriate permissions?
>
>

Anon
Fri Jul 11 12:27:59 PDT 2008

Cliff Galiher wrote:
> I believe a security/permissions issue would throw a different error.
> That sounds like a group policy setting to me. The security section of
> GP has various access rights, and it sounds like users are not granted
> network logon rights.

I think that's right. I set the permissions on the sharing and the
security tabs correctly, I think.

Where do I configure network logon rights?

Anon
Fri Jul 11 12:29:57 PDT 2008

Merv Porter [SBS-MVP] wrote:
> I suspect you need to set the Share Permssions to Everyone (FULL) and NTFS
> (security tab) permissions to allow access for the appropriate domain users
> (or the domain users group itself if everyone needs access to those
> file/folders).
>
> Having said that, shared files/folders belong on the server so that they can
> be available 24/7 (without requiring the workstation to be continuously up
> and running), so they can be backed up with the daily SBS server backup, and
> so the appropriate level of security can be maintained.
>

Sometimes you need to share folders. Really large files, like several
gigabytes, are easier to transfer from workstation to workstation. We
don't need the files backed up.

Cliff
Fri Jul 11 14:11:05 PDT 2008

Depends on which group policy object is causing you issues.

The best thing to do is use the RSoP wizard to look at the computer having
issues. We don't care about the user settings so when you run the wizard
you can skip the user section. Just make sure you are getting the result set
from the right machine.

In the results report, drill down through computer configuration->windows
settings->security settings->local policies->user Rights Assignment
There is a policy called "access this computer from the network" that
controls who can access the computer. The default grants "Everyone"
permission, so you *should* be able to access the machine. But since you
can't, we'll assume you'll see a "winning" policy in your report that has
restricted the groups. From there you can go and edit that policy and add
the groups you need to provide access to.

Good luck!

-Cliff

"Anon E. Mouse" <fake@fake.com> wrote in message
news:4877B43F.7010804@fake.com...
> Cliff Galiher wrote:
>> I believe a security/permissions issue would throw a different error.
>> That sounds like a group policy setting to me. The security section of
>> GP has various access rights, and it sounds like users are not granted
>> network logon rights.
>
> I think that's right. I set the permissions on the sharing and the
> security tabs correctly, I think.
>
> Where do I configure network logon rights?

Lanwench
Fri Jul 11 15:20:44 PDT 2008

Anon E. Mouse <fake@fake.com> wrote:
> Merv Porter [SBS-MVP] wrote:
>> I suspect you need to set the Share Permssions to Everyone (FULL)
>> and NTFS (security tab) permissions to allow access for the
>> appropriate domain users (or the domain users group itself if
>> everyone needs access to those file/folders).
>>
>> Having said that, shared files/folders belong on the server so that
>> they can be available 24/7 (without requiring the workstation to be
>> continuously up and running), so they can be backed up with the
>> daily SBS server backup, and so the appropriate level of security
>> can be maintained.
>
> Sometimes you need to share folders. Really large files, like several
> gigabytes, are easier to transfer from workstation to workstation. We
> don't need the files backed up.

I disagree. Why is it easier to transfer a file between PCs, than from a
server to a PC? I don't grant users admin rights, and I want all PCs to stay
consistent - no shares, no local data. Anything that's important enough to
have, goes on the server.