Share permissions when accessed locally via UNC

Question

I have a w2k3 server (terminal server) and a domain user.

If the user accesses "\\TS\Folder" from another computer, that user can read\write without any problem. If I login to "TS" as the user, they cannot access the folder "\\TS\Folder" using the UNC convention. "C:\Folder" works fine. I even tried adding the user to the admin group of TS and it still did not allow access when using the UNC path locally.

I've relogged, rebooted, gpupdate'ed, etc. Any ideas? I cannot think of a reason why the user can access with the UNC path on other computers but not with the UNC path locally.

EDIT: Situations tried:
BadUser on TS to \\TS\Folder = Fail
BadUser on TS to C:\Folder = Pass
BadUser on TS to \\xp1\Folder = Pass
BadUser on xp1 to \\TS\Folder = Pass
BadUser on xp1 to \\xp1\Folder = Pass

It it just that particular user or does this happen for any user in your domain? — Zoredache, Oct 15 '09 at 17:27
Can the user access \\someotherserver\folder while logged on to TS? — nray, Oct 15 '09 at 17:43
@Zoredache - Just this user. Other users can access it fine @nray - Yes, I can connect to other shares on other servers — bugtussle, Oct 15 '09 at 18:28

score 2 · Accepted Answer · answered Oct 15 '09 at 19:15

Well it turns out I left out an important detail: The folder contains vbs files, it worked when I tired to access a plain text doc or word doc. We also recently updated to ie7. I had to add "file://ts" to the trusted sites list in IE7. It works better now.

Thanks for your help. Hopefully, MS will remove IE dependence one day.

score 0 · Answer 2 · answered Oct 15 '09 at 14:55

0

You mentioned that you checked the share permissions, but have you checked the folder permissions as well?

answered Oct 15 '09 at 14:55

dasaybz

96
1
2
8

Yes, I checked both. I can access it from another computer, I cannot access it locally with the UNC path – bugtussle Oct 15 '09 at 15:28
I also added the user to the Local Admin group and it still did not work – bugtussle Oct 15 '09 at 15:30
Have you enabled file and print sharing on your firewall? It's possible that this traffic could be getting blocked. – dasaybz Oct 15 '09 at 18:12
firewall is disabled – bugtussle Oct 15 '09 at 18:25

score 0 · Answer 3 · answered Oct 15 '09 at 16:34

0

Anything in the event logs and can you connect to shares on other servers?

Check to see if the Workstation service is having issues.

answered Oct 15 '09 at 16:34

squillman

37,883
12
92
146

Nothing from the Workstation service in the logs. I have connected to other shares in the network without issue. – bugtussle Oct 15 '09 at 18:24

score 0 · Answer 4 · answered Oct 15 '09 at 18:37

0

There was an issue with Windows XP SP1 that would cause this to happen - the problem was related to the loopback interface (127.0.0.1) being unable to tell the NetBIOS over TCP requestor the interface speed. This was fixed in one of the post SP1 hotfixes IIRC and I've never heard of it affecting Windows 2003 but they shared a lot of code so it's possible.

Are you seeing Event log entries with ID 3019 when the attempt to map to the UNC path fails?

answered Oct 15 '09 at 18:37

Helvick

20,019
4
38
55

I do have some 3019 events, although it does not always create an event when access is denied. – bugtussle Oct 15 '09 at 18:49

Share permissions when accessed locally via UNC

4 Answers4