Partition sharing problems Win7 cont'd

Z

Zootal

Brand new Windows 7 x64 installation.
Go into control panel, network and sharing center, change advanced
sharing settings.

Select Turn on network discovery
Select Turn on file and printer sharing
Select Turn off password protected sharing

Create a new share for c:\ called simply c. Customize permissions,
Everyone has full control, change, read. Repeat for d:\ partition.

Go to XP computer. bring up Windows explorer. Go to \\10.0.0.112 (that
is the ip address of win7 machine). I see my two new shares. Try to
access d. Works. Try to access c. "Windows cannot access \\10.0.0.112\c.
You do not have permission....".

Why? Both shares are setup the same. Why does Windows let me in d and not
c? FWIW, I have another Win7 machine that does the exact same thing. Is
this a Microsoft "let us think for you" thing where you just can't share
tha partition that the OS is installed on?

I'm pretty sure this has nothing to do with file level rights - it is the
partition itself I can't access.
 
S

Seth

Erm... why start a new thread for the continuation of an existing one?
Anyone following the thread might not see this as it is not the same thread.
Brand new Windows 7 x64 installation.
Go into control panel, network and sharing center, change advanced
sharing settings.

Select Turn on network discovery
Select Turn on file and printer sharing
Select Turn off password protected sharing
Would affect both C: and D: drive shares the same so that's probably not
it...
Create a new share for c:\ called simply c. Customize permissions,
Everyone has full control, change, read. Repeat for d:\ partition.
Like your last posting, this is share level permissions you are speaking of,
right? What about file level permissions? Both drives formatted the same
(NTFS vs. FAT32, etc..)? You say both are NTFS, but I like to double check
anyhow.

Windows, by default, locks down the root of C: in regards to file level
permissions as it is not a "proper" place to store/user or access data from.
Also, depending on your version of Windows (or maybe all but I'm not sure
about the home flavors as I never use them) you will see the root of the
drive is already shared as C$ (and D$ for the D: drive)
Go to XP computer. bring up Windows explorer. Go to \\10.0.0.112 (that
is the ip address of win7 machine). I see my two new shares. Try to
access d. Works. Try to access c. "Windows cannot access \\10.0.0.112\c.
You do not have permission....".

Why? Both shares are setup the same. Why does Windows let me in d and not
c? FWIW, I have another Win7 machine that does the exact same thing. Is
this a Microsoft "let us think for you" thing where you just can't share
tha partition that the OS is installed on?
You can, just if the user that is "coming in" to that file structure doesn't
have file level rights they will get access denied.
I'm pretty sure this has nothing to do with file level rights - it is the
partition itself I can't access.
You DON'T access a partition remotely, you access files via a share so it is
either share level access (which you describe having set above) and/or file
level access which this is twice you have neglected to include. Before you
dismiss file level access, check it and answer the questions above.
 
Z

Zootal

Like your last posting, this is share level permissions you are
speaking of, right? What about file level permissions? Both drives
formatted the same (NTFS vs. FAT32, etc..)? You say both are NTFS, but
I like to double check anyhow.

Both are ntfs, I formatted them both on a brand new drive just a few hours
ago.

So considering your comments on access levels, I went and added the guest
user to the list of "group or user names" for the root of C:, and now I can
get into it. Strange - with previous version of windows, all I had to do was
enable the guest account. Interesting that access is denied into the windows,
program files, etc. directories.

I might add that I use the guest account to get into shares on my computers.
 
S

Seth

Zootal said:
Both are ntfs, I formatted them both on a brand new drive just a few hours
ago.

So considering your comments on access levels, I went and added the guest
user to the list of "group or user names" for the root of C:, and now I
can
get into it. Strange - with previous version of windows, all I had to do
was
enable the guest account. Interesting that access is denied into the
windows,
program files, etc. directories.

I might add that I use the guest account to get into shares on my
computers.
I would guess that with your previous versions of Windows you were using
FAT32 and not NTFS. FAT32 doesn't have any file level security.

By default the guest account is denied to everything as it is a serious
security hole.
 
Z

Zootal

I would guess that with your previous versions of Windows you were
using FAT32 and not NTFS. FAT32 doesn't have any file level security.

By default the guest account is denied to everything as it is a
serious security hole.
A while back I wanted to share a partition that had many thousands of
files on it. It was ntfs, and when I set up sharing, Windows wanted to
change the security on each file. After a long time it was still
chugging, so I stopped it and converted the partition to fat32. Problem
solved. I'd be running fat32 now but Win7 won't install to fat32.

Eventually I converted my servers to linux and ext2 or ext3, which made
configuration and maintenance much easier and faster, but that is another
story.

And I often use the root account on my linux boxes, which offends quite a
few of the linux purists. But in my environment, security is not an
issue, usability is.
 
Z

Zootal

I would guess that with your previous versions of Windows you were
using FAT32 and not NTFS. FAT32 doesn't have any file level security.

By default the guest account is denied to everything as it is a
serious security hole.
PS thanks for your help - I was able to get it to work after I read your
comments on security :)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top