Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > Server Security > Re: Administrative shares

Reply
Thread Tools Display Modes

Re: Administrative shares

 
 
Al Dunbar
Guest
Posts: n/a

 
      10-31-2009

"John Smith" <> wrote in message
news:zt-dnfOifOVPbXfXnZ2dnUVZ8l-...
> I have shared a couple of drives administratively so they can be accessed
> by \\server\drive$. On connection I am asked for a password. The server is
> a windows XP Professional computer.
>
> Using the server's built in administrator account I can have access, but
> user accounts who are also administrators on the computer holding the
> share seem not to be able to connect.


What permissions have you set on the share?

> When typing <username> and <password> into the dialog that appears, it


These user accounts that are also administrators on the computer in
question - are they local to the computer, defined on another computer, or
are they domain accounts?

> responds with server\<username> and <password> (obscured) as though the
> account is no good.


I don't understand what you mean by obscured. If the password is displayed
as asterisks when you type it, that is normal behaviour.

> I cannot set permissions on the shared drive as it says that the
> permissions are not available as the drive has been shared
> administratively.
>
> Any idea how I can allow other administrator user accounts to connect to
> this shared drive?


That is how it is supposed to work by default, and I have never had a
problem with this. That said, we have a domain environment.

/Al


 
Reply With Quote
 
 
 
 
Al Dunbar
Guest
Posts: n/a

 
      11-01-2009


"John Smith" <> wrote in message
news: ...
>
> "Al Dunbar" <> wrote in message
> news:...
>>
>> "John Smith" <> wrote in message
>> news:zt-dnfOifOVPbXfXnZ2dnUVZ8l-...
>>> I have shared a couple of drives administratively so they can be
>>> accessed by \\server\drive$. On connection I am asked for a password.
>>> The server is a windows XP Professional computer.


<snip>

>>> responds with server\<username> and <password> (obscured) as though the
>>> account is no good.

>>
>> I don't understand what you mean by obscured. If the password is
>> displayed as asterisks when you type it, that is normal behaviour.

>
> Yes, but I did not think it was normal for users who were administrators
> to be refused connection.


That is fair enough, however, saying the password is "obscured" "as though
the account is no good" is not as good a description of the problem as just
saying "I did not think it was normal for users who were administrators to
be refused connection.".

>
>>
>>> I cannot set permissions on the shared drive as it says that the
>>> permissions are not available as the drive has been shared
>>> administratively.
>>>
>>> Any idea how I can allow other administrator user accounts to connect to
>>> this shared drive?

>>
>> That is how it is supposed to work by default, and I have never had a
>> problem with this. That said, we have a domain environment.

>
> It is not a problem really as there are other ways around it. I was just
> querying why can only the built in Administrator account have access, but
> not computer user accounts who are administrators.


Well, since all administrative access on the systems I work with is granted
to the local administrators group rather than to the administrator account,
and any account in administrators has full administrative access, I can only
conclude that there is something wrong with how your systems are configured.

/Al


 
Reply With Quote
 
Rahisuddin Shah
Guest
Posts: n/a

 
      11-12-2009
1. If its not domain enviroment
a. Logon to the computer(server) where you have created Shared Folder with
admin account.
b. See the Shared Permission (everyone or Authenticated users) and then see
Security Tab.
c. In Security Tab, see if the full access assigned to Administrators group
d. All users accounts must be created on the server (XP machine in your
case)

Now when users try to connect to the shared folder they need to give
credential like this servername\username and type the same password as you
created in server. It should work.

2. If you are in Domain
a. Logon to the computer(server) where you have created Shared Folder with
admin account.
b. See the Shared Permission (everyone or Authenticated users) and then see
Security Tab.
c. In Security Tab, see if the full access assigned to Administrators group
d. Make sure that users (domain account) are member of Local Administrators
group

Now the users try to connect to shared folder, it should not ask for
credential if all are in same domain, still you can pass credential as
domainname\username and password.

Let me know if it works

thanks

rahisuddin shah




"Al Dunbar" <> wrote in message
news:...
>
> "John Smith" <> wrote in message
> news: ...
>>
>> "Al Dunbar" <> wrote in message
>> news:...
>>>
>>> "John Smith" <> wrote in message
>>> news:zt-dnfOifOVPbXfXnZ2dnUVZ8l-...
>>>> I have shared a couple of drives administratively so they can be
>>>> accessed by \\server\drive$. On connection I am asked for a password.
>>>> The server is a windows XP Professional computer.

>
> <snip>
>
>>>> responds with server\<username> and <password> (obscured) as though the
>>>> account is no good.
>>>
>>> I don't understand what you mean by obscured. If the password is
>>> displayed as asterisks when you type it, that is normal behaviour.

>>
>> Yes, but I did not think it was normal for users who were administrators
>> to be refused connection.

>
> That is fair enough, however, saying the password is "obscured" "as though
> the account is no good" is not as good a description of the problem as
> just saying "I did not think it was normal for users who were
> administrators to be refused connection.".
>
>>
>>>
>>>> I cannot set permissions on the shared drive as it says that the
>>>> permissions are not available as the drive has been shared
>>>> administratively.
>>>>
>>>> Any idea how I can allow other administrator user accounts to connect
>>>> to this shared drive?
>>>
>>> That is how it is supposed to work by default, and I have never had a
>>> problem with this. That said, we have a domain environment.

>>
>> It is not a problem really as there are other ways around it. I was just
>> querying why can only the built in Administrator account have access, but
>> not computer user accounts who are administrators.

>
> Well, since all administrative access on the systems I work with is
> granted to the local administrators group rather than to the administrator
> account, and any account in administrators has full administrative access,
> I can only conclude that there is something wrong with how your systems
> are configured.
>
> /Al
>
>


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Re: Hardening Win2k3: Should I disable administrative shares? Special Access Server Security 0 10-22-2009 01:07 AM
Can you enable the Admin Shares Drive$ in a workgroup WillyNPG Windows Vista Administration 1 03-13-2008 11:33 AM
Seeing XP shares from Vista Solved !!! Trevor Windows Vista File Management 0 08-18-2007 03:39 PM
Admin shares Andreas Windows Vista Administration 0 04-18-2007 05:28 PM
How to enable Administrative Shares in Vista ?? Synapse Syndrome Windows Vista File Management 8 03-25-2007 03:29 AM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59