Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Hidden Share
Hidden Share [message #161550] Wed, 30 September 2009 12:32 Go to next message
BlueIT  is currently offline BlueIT  United States
Messages: 27
Registered: August 2009
Junior Member
I have 7 domain controllers in the domain at three different sites. I
also have a 2003 AD domain. I came across something stranged today
but can't figure out why. Don't think it is causing any major
problems. The issue is with hidden shares on all domain controllers.
When I do a net share I am able to view the hidden shares. The issue
is that I (domain admin) can not map to the DC without being prompted
for credentials. If I provide the creds of domain admin it works
fine. Same applies for other domain admins. I looked into all GPs
that could are assigned to domain controllers but can not find
anything obvious.

Thanks in advance

BlueIT
Re: Hidden Share [message #161552 is a reply to message #161550] Wed, 30 September 2009 12:47 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

BlueIT schrieb:
> I have 7 domain controllers in the domain at three different sites. I
> also have a 2003 AD domain. I came across something stranged today
> but can't figure out why. Don't think it is causing any major
> problems. The issue is with hidden shares on all domain controllers.
> When I do a net share I am able to view the hidden shares. The issue
> is that I (domain admin) can not map to the DC without being prompted
> for credentials. If I provide the creds of domain admin it works
> fine. Same applies for other domain admins. I looked into all GPs
> that could are assigned to domain controllers but can not find
> anything obvious.

Are those shares with an ending $-sign?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: Hidden Share [message #161569 is a reply to message #161550] Thu, 01 October 2009 07:59 Go to previous messageGo to next message
lanwench  is currently offline lanwench  United States
Messages: 1684
Registered: July 2009
Senior Member
BlueIT <bijal.shah@bluecg.com> wrote:
> I have 7 domain controllers in the domain at three different sites. I
> also have a 2003 AD domain. I came across something stranged today
> but can't figure out why. Don't think it is causing any major
> problems. The issue is with hidden shares on all domain controllers.
> When I do a net share I am able to view the hidden shares. The issue
> is that I (domain admin) can not map to the DC without being prompted
> for credentials. If I provide the creds of domain admin it works
> fine. Same applies for other domain admins. I looked into all GPs
> that could are assigned to domain controllers but can not find
> anything obvious.
>
> Thanks in advance
>
> BlueIT

So while you are logged into the domain as *a* (not "the") domain
administrator on a workstation, you cannot map to one of the shares on a DC
without providing *the* domain admin credentials?

Are you 100% sure your user ID is in the domain admins group?

Does this happen on *non*-hidden shares on the same servers?
What are the share permission properties, just for grins 'n giggles?
If you copy the built-in domain Administrator account and log in as that new
user, same results?
Re: Hidden Share [message #161575 is a reply to message #161569] Thu, 01 October 2009 08:47 Go to previous messageGo to next message
BlueIT  is currently offline BlueIT  United States
Messages: 27
Registered: August 2009
Junior Member
On Oct 1, 8:59 am, "Lanwench [MVP - Exchange]"
<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
> BlueIT <bijal.s...@bluecg.com> wrote:
> > I have 7 domain controllers in the domain at three different sites.  I
> > also have a 2003 AD domain.  I came across something stranged today
> > but can't figure out why.  Don't think it is causing any major
> > problems.  The issue is with hidden shares on all domain controllers.
> > When I do a net share I am able to view the hidden shares.  The issue
> > is that I (domain admin) can not map to the DC without being prompted
> > for credentials.  If I provide the creds of domain admin it works
> > fine.  Same applies for other domain admins.  I looked into all GPs
> > that could are assigned to domain controllers but can not find
> > anything obvious.
>
> > Thanks in advance
>
> > BlueIT
>
> So while you are logged into the domain as *a* (not "the") domain
> administrator on a workstation, you cannot map to one of the shares on a DC
> without providing *the* domain admin credentials?
>
> Are you 100% sure your user ID is in the domain admins group?
>
> Does this happen on *non*-hidden shares on the same servers?
> What are the share permission properties, just for grins 'n giggles?
> If you copy the built-in domain Administrator account and log in as that new
> user, same results?

To clarify one of the test I did conduct. I created a share on one of
the domain controller and permissioned the share just for Domain
Admins and worked fine.

Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)

Same applies to other domain admins.

As for if the hidden shares themselves, I ran net share within the
command prompt and all appear:
IPC$
ADMIN$
C$

For these hidden shares, you can not set/change permissioning.

This issue is present on all domain controllers. A domain controller
GP might be the reason, but I haven't found anything obvious but
doesn't rule it out either.
Re: Hidden Share [message #161584 is a reply to message #161575] Thu, 01 October 2009 14:30 Go to previous messageGo to next message
lanwench  is currently offline lanwench  United States
Messages: 1684
Registered: July 2009
Senior Member
Bij <bijal.shah@bluecg.com> wrote:

<snip>

> To clarify one of the test I did conduct. I created a share on one of
> the domain controller and permissioned the share just for Domain
> Admins and worked fine.
>
> Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
>
> Same applies to other domain admins.
>
> As for if the hidden shares themselves, I ran net share within the
> command prompt and all appear:
> IPC$
> ADMIN$
> C$
>
> For these hidden shares, you can not set/change permissioning.

Ah. Those aren't "hidden shares;" you're talking about administrative
shares. They also happen to be hidden, but that's not important here.

>
> This issue is present on all domain controllers. A domain controller
> GP might be the reason, but I haven't found anything obvious but
> doesn't rule it out either.

OK. It would be extremely helpful if you would answer the exact questions
put to you when people reply - it saves everyone a lot of time. Please
answer my questions inline - I've
updated them below

1) So while you are logged into the domain as *a* (not "the") domain
administrator on a workstation, you cannot map to one of the shares on a DC
without providing *the* domain admin credentials?

2) Are you 100% sure your user ID is in the domain admins group?

3) If you copy the built-in domain Administrator account and log in as that
new user, same results?
Re: Hidden Share [message #161851 is a reply to message #161584] Thu, 08 October 2009 08:09 Go to previous messageGo to next message
BlueIT  is currently offline BlueIT  United States
Messages: 27
Registered: August 2009
Junior Member
On Oct 1, 3:30 pm, "Lanwench [MVP - Exchange]"
<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
> Bij <bijal.s...@bluecg.com> wrote:
>
> <snip>
>
> > To clarify one of the test I did conduct.  I created a share on one of
> > the domain controller and permissioned the share just for Domain
> > Admins and worked fine.
>
> > Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
>
> > Same applies to other domain admins.
>
> > As for if the hidden shares themselves, I ran net share within the
> > command prompt and all appear:
> > IPC$
> > ADMIN$
> > C$
>
> > For these hidden shares, you can not set/change permissioning.
>
> Ah. Those aren't "hidden shares;" you're talking about administrative
> shares. They also happen to be hidden, but that's not important here.
>
>
>
> > This issue is present on all domain controllers.  A domain controller
> > GP might be the reason, but I haven't found anything obvious but
> > doesn't rule it out either.
>
> OK. It would be extremely helpful if you would answer the exact questions
> put to you when people reply - it saves everyone a lot of time. Please
> answer my questions inline - I've
> updated them below
>

1) So while you are logged into the domain as *a* (not "the") domain
administrator on a workstation, you cannot map to one of the shares on
a DC
without providing *the* domain admin credentials?

If I am on any machine, logged on with the domain administrator
account I do not have any issues with being prompted mapping to c$ for
example.

2) Are you 100% sure your user ID is in the domain admins group?

Yes I am 100% I am a member of the domain admins group. I have
mentioned prior that all users in the domain admins group are
experiencing the same issue.

3) If you copy the built-in domain Administrator account and log in as
that new user, same results?

Not sure I understand you. Please clarify.
Re: Hidden Share [message #161896 is a reply to message #161851] Thu, 08 October 2009 23:42 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
> On Oct 1, 3:30 pm, "Lanwench [MVP - Exchange]"
> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
>> Bij <bijal.s...@bluecg.com> wrote:
>>
>> <snip>
>>
>>> To clarify one of the test I did conduct.  I created a share on one of
>>> the domain controller and permissioned the share just for Domain
>>> Admins and worked fine.
>>
>>> Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
>>> Same applies to other domain admins.
>>> As for if the hidden shares themselves, I ran net share within the
>>> command prompt and all appear:
>>> IPC$
>>> ADMIN$
>>> C$
>>
>>> For these hidden shares, you can not set/change permissioning.
>>
>> Ah. Those aren't "hidden shares;" you're talking about administrative
>> shares. They also happen to be hidden, but that's not important here.
>>
>>
>>
>>> This issue is present on all domain controllers.  A domain controller
>>> GP might be the reason, but I haven't found anything obvious but
>>> doesn't rule it out either.
>>
>> OK. It would be extremely helpful if you would answer the exact questions
>> put to you when people reply - it saves everyone a lot of time. Please
>> answer my questions inline - I've
>> updated them below
>>
>
> 1) So while you are logged into the domain as *a* (not "the") domain
> administrator on a workstation, you cannot map to one of the shares on
> a DC
> without providing *the* domain admin credentials?

If you are logged on as a local administrator on a workstation (not the
AD domain administrator), you will be prompted for credentials to
access the shares on a DC.
>
> If I am on any machine, logged on with the domain administrator
> account I do not have any issues with being prompted mapping to c$ for
> example.

As expected.
>
> 2) Are you 100% sure your user ID is in the domain admins group?
>
> Yes I am 100% I am a member of the domain admins group. I have
> mentioned prior that all users in the domain admins group are
> experiencing the same issue.

If you are a member of the AD Domain Administrator group, you should be
able to access the C$ share on a DC.

Are you part of any group that has been denied access?

Have the C: drive permissions been altered in any way, possibly to
increase security?

>
> 3) If you copy the built-in domain Administrator account and log in as
> that new user, same results?
>
> Not sure I understand you. Please clarify.

Right click the Domain "Administrator" account, copy, and create an
account with a different name, password, etc. Test to see if you can
access the c$ share on the DC.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit
among responding engineers, and to help others benefit from your
resolution.

Ace Fekay, MCT, MCTS Windows 2008, MCTS Exchange, MCSE, MCSA 2003 &
2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Re: Hidden Share [message #161986 is a reply to message #161896] Mon, 12 October 2009 13:41 Go to previous messageGo to next message
BlueIT  is currently offline BlueIT  United States
Messages: 27
Registered: August 2009
Junior Member
On Oct 9, 12:42 am, Ace Fekay [MCT] <ace...@mvps.RemoveThisPart.org>
wrote:
> > On Oct 1, 3:30 pm, "Lanwench [MVP - Exchange]"
> > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
> >> Bij <bijal.s...@bluecg.com> wrote:
>
> >> <snip>
>
> >>> To clarify one of the test I did conduct.  I created a share on one of
> >>> the domain controller and permissioned the share just for Domain
> >>> Admins and worked fine.
>
> >>> Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
> >>> Same applies to other domain admins.
> >>> As for if the hidden shares themselves, I ran net share within the
> >>> command prompt and all appear:
> >>> IPC$
> >>> ADMIN$
> >>> C$
>
> >>> For these hidden shares, you can not set/change permissioning.
>
> >> Ah. Those aren't "hidden shares;" you're talking about administrative
> >> shares. They also happen to be hidden, but that's not important here.
>
> >>> This issue is present on all domain controllers.  A domain controller
> >>> GP might be the reason, but I haven't found anything obvious but
> >>> doesn't rule it out either.
>
> >> OK. It would be extremely helpful if you would answer the exact questions
> >> put to you when people reply - it saves everyone a lot of time. Please
> >> answer my questions inline - I've
> >> updated them below
>
> > 1) So while you are logged into the domain as *a* (not "the") domain
> > administrator on a workstation, you cannot map to one of the shares on
> > a DC
> > without providing *the* domain admin credentials?
>
> If you are logged on as a local administrator on a workstation (not the
> AD domain administrator), you will be prompted for credentials to
> access the shares on a DC.
>
>
>
> > If I am on any machine, logged on with the domain administrator
> > account I do not have any issues with being prompted mapping to c$ for
> > example.
>
> As expected.
>
>
>
> > 2) Are you 100% sure your user ID is in the domain admins group?
>
> > Yes I am 100% I am a member of the domain admins group. I have
> > mentioned prior that all users in the domain admins group are
> > experiencing the same issue.
>
> If you are a member of the AD Domain Administrator group, you should be
> able to access the C$ share on a DC.
>
> Are you part of any group that has been denied access?
>
> Have the C: drive permissions been altered in any way, possibly to
> increase security?
>
>
>
> > 3) If you copy the built-in domain Administrator account and log in as
> > that new user, same results?
>
> > Not sure I understand you.  Please clarify.
>
> Right click the Domain "Administrator" account, copy, and create an
> account with a different name, password, etc. Test to see if you can
> access the c$ share on the DC.
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MCT, MCTS Windows 2008, MCTS Exchange, MCSE, MCSA 2003 &
> 2000, MCSA Messaging
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please checkhttp://support.microsoft.comfor regional support phone numbers.- Hide quoted text -
>
> - Show quoted text -

Right click the Domain "Administrator" account, copy, and create an
account with a different name, password, etc. Test to see if you can
access the c$ share on the DC.

This worked fine.
Re: Hidden Share [message #161996 is a reply to message #161986] Mon, 12 October 2009 17:49 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Bij" <bijal.shah@bluecg.com> wrote in message
news:d34d37ad-be13-4200-8398-759639955df9@b15g2000yqd.googlegroups.com...
On Oct 9, 12:42 am, Ace Fekay [MCT] <ace...@mvps.RemoveThisPart.org>
wrote:
> > On Oct 1, 3:30 pm, "Lanwench [MVP - Exchange]"
> > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
> >> Bij <bijal.s...@bluecg.com> wrote:
>
> >> <snip>
>
> >>> To clarify one of the test I did conduct. I created a share on one of
> >>> the domain controller and permissioned the share just for Domain
> >>> Admins and worked fine.
>
> >>> Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
> >>> Same applies to other domain admins.
> >>> As for if the hidden shares themselves, I ran net share within the
> >>> command prompt and all appear:
> >>> IPC$
> >>> ADMIN$
> >>> C$
>
> >>> For these hidden shares, you can not set/change permissioning.
>
> >> Ah. Those aren't "hidden shares;" you're talking about administrative
> >> shares. They also happen to be hidden, but that's not important here.
>
> >>> This issue is present on all domain controllers. A domain controller
> >>> GP might be the reason, but I haven't found anything obvious but
> >>> doesn't rule it out either.
>
> >> OK. It would be extremely helpful if you would answer the exact
> >> questions
> >> put to you when people reply - it saves everyone a lot of time. Please
> >> answer my questions inline - I've
> >> updated them below
>
> > 1) So while you are logged into the domain as *a* (not "the") domain
> > administrator on a workstation, you cannot map to one of the shares on
> > a DC
> > without providing *the* domain admin credentials?
>
> If you are logged on as a local administrator on a workstation (not the
> AD domain administrator), you will be prompted for credentials to
> access the shares on a DC.
>
>
>
> > If I am on any machine, logged on with the domain administrator
> > account I do not have any issues with being prompted mapping to c$ for
> > example.
>
> As expected.
>
>
>
> > 2) Are you 100% sure your user ID is in the domain admins group?
>
> > Yes I am 100% I am a member of the domain admins group. I have
> > mentioned prior that all users in the domain admins group are
> > experiencing the same issue.
>
> If you are a member of the AD Domain Administrator group, you should be
> able to access the C$ share on a DC.
>
> Are you part of any group that has been denied access?
>
> Have the C: drive permissions been altered in any way, possibly to
> increase security?
>
>
>
> > 3) If you copy the built-in domain Administrator account and log in as
> > that new user, same results?
>
> > Not sure I understand you. Please clarify.
>
> Right click the Domain "Administrator" account, copy, and create an
> account with a different name, password, etc. Test to see if you can
> access the c$ share on the DC.
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MCT, MCTS Windows 2008, MCTS Exchange, MCSE, MCSA 2003 &
> 2000, MCSA Messaging
> Microsoft Certified Trainer
>
> For urgent issues, please contact Microsoft PSS directly. Please
> checkhttp://support.microsoft.comfor regional support phone numbers.- Hide
> quoted text -
>
> - Show quoted text -

Right click the Domain "Administrator" account, copy, and create an
account with a different name, password, etc. Test to see if you can
access the c$ share on the DC.

This worked fine.


---

If that worked fine, then that means there's a restriction in the account(s)
that are not working.

Ace
Re: Hidden Share [message #292449 is a reply to message #161996] Tue, 20 October 2009 19:55 Go to previous messageGo to next message
BlueIT  is currently offline BlueIT  United States
Messages: 27
Registered: August 2009
Junior Member
On Oct 12, 6:49 pm, "Ace Fekay [MCT]" <ace...@mvps.RemoveThisPart.org>
wrote:
> "Bij" <bijal.s...@bluecg.com> wrote in message
>
> news:d34d37ad-be13-4200-8398-759639955df9@b15g2000yqd.googlegroups.com...
> On Oct 9, 12:42 am, Ace Fekay [MCT] <ace...@mvps.RemoveThisPart.org>
> wrote:
>
>
>
>
>
> > > On Oct 1, 3:30 pm, "Lanwench [MVP - Exchange]"
> > > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
> > >> Bij <bijal.s...@bluecg.com> wrote:
>
> > >> <snip>
>
> > >>> To clarify one of the test I did conduct. I created a share on one of
> > >>> the domain controller and permissioned the share just for Domain
> > >>> Admins and worked fine.
>
> > >>> Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
> > >>> Same applies to other domain admins.
> > >>> As for if the hidden shares themselves, I ran net share within the
> > >>> command prompt and all appear:
> > >>> IPC$
> > >>> ADMIN$
> > >>> C$
>
> > >>> For these hidden shares, you can not set/change permissioning.
>
> > >> Ah. Those aren't "hidden shares;" you're talking about administrative
> > >> shares. They also happen to be hidden, but that's not important here..
>
> > >>> This issue is present on all domain controllers. A domain controller
> > >>> GP might be the reason, but I haven't found anything obvious but
> > >>> doesn't rule it out either.
>
> > >> OK. It would be extremely helpful if you would answer the exact
> > >> questions
> > >> put to you when people reply - it saves everyone a lot of time. Please
> > >> answer my questions inline - I've
> > >> updated them below
>
> > > 1) So while you are logged into the domain as *a* (not "the") domain
> > > administrator on a workstation, you cannot map to one of the shares on
> > > a DC
> > > without providing *the* domain admin credentials?
>
> > If you are logged on as a local administrator on a workstation (not the
> > AD domain administrator), you will be prompted for credentials to
> > access the shares on a DC.
>
> > > If I am on any machine, logged on with the domain administrator
> > > account I do not have any issues with being prompted mapping to c$ for
> > > example.
>
> > As expected.
>
> > > 2) Are you 100% sure your user ID is in the domain admins group?
>
> > > Yes I am 100% I am a member of the domain admins group. I have
> > > mentioned prior that all users in the domain admins group are
> > > experiencing the same issue.
>
> > If you are a member of the AD Domain Administrator group, you should be
> > able to access the C$ share on a DC.
>
> > Are you part of any group that has been denied access?
>
> > Have the C: drive permissions been altered in any way, possibly to
> > increase security?
>
> > > 3) If you copy the built-in domain Administrator account and log in as
> > > that new user, same results?
>
> > > Not sure I understand you. Please clarify.
>
> > Right click the Domain "Administrator" account, copy, and create an
> > account with a different name, password, etc. Test to see if you can
> > access the c$ share on the DC.
>
> > --
> > Ace
>
> > This posting is provided "AS-IS" with no warranties or guarantees and
> > confers no rights.
>
> > Please reply back to the newsgroup or forum for collaboration benefit
> > among responding engineers, and to help others benefit from your
> > resolution.
>
> > Ace Fekay, MCT, MCTS Windows 2008, MCTS Exchange, MCSE, MCSA 2003 &
> > 2000, MCSA Messaging
> > Microsoft Certified Trainer
>
> > For urgent issues, please contact Microsoft PSS directly. Please
> > checkhttp://support.microsoft.comforregional support phone numbers.- Hide
> > quoted text -
>
> > - Show quoted text -
>
> Right click the Domain "Administrator" account, copy, and create an
> account with a different name, password, etc. Test to see if you can
> access the c$ share on the DC.
>
> This worked fine.
>
> ---
>
> If that worked fine, then that means there's a restriction in the account(s)
> that are not working.
>
> Ace- Hide quoted text -
>
> - Show quoted text -

Can you provided any information on what it could possibly be. This
was not always the case.
Re: Hidden Share [message #292481 is a reply to message #292449] Tue, 20 October 2009 20:44 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"BlueIT" <bijal.shah@bluecg.com> wrote in message
news:22b40a47-f762-4438-b0d4-4f42bc7ea1a4@l34g2000vba.googlegroups.com...
On Oct 12, 6:49 pm, "Ace Fekay [MCT]" <ace...@mvps.RemoveThisPart.org>
wrote:
> "Bij" <bijal.s...@bluecg.com> wrote in message
>
> news:d34d37ad-be13-4200-8398-759639955df9@b15g2000yqd.googlegroups.com...
> On Oct 9, 12:42 am, Ace Fekay [MCT] <ace...@mvps.RemoveThisPart.org>
> wrote:
>
>
>
>
>
> > > On Oct 1, 3:30 pm, "Lanwench [MVP - Exchange]"
> > > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:
> > >> Bij <bijal.s...@bluecg.com> wrote:
>
> > >> <snip>
>
> > >>> To clarify one of the test I did conduct. I created a share on one
> > >>> of
> > >>> the domain controller and permissioned the share just for Domain
> > >>> Admins and worked fine.
>
> > >>> Example: \\dc1\c$ (prompted) vs \\dc1\c (not prompted)
> > >>> Same applies to other domain admins.
> > >>> As for if the hidden shares themselves, I ran net share within the
> > >>> command prompt and all appear:
> > >>> IPC$
> > >>> ADMIN$
> > >>> C$
>
> > >>> For these hidden shares, you can not set/change permissioning.
>
> > >> Ah. Those aren't "hidden shares;" you're talking about administrative
> > >> shares. They also happen to be hidden, but that's not important here.
>
> > >>> This issue is present on all domain controllers. A domain controller
> > >>> GP might be the reason, but I haven't found anything obvious but
> > >>> doesn't rule it out either.
>
> > >> OK. It would be extremely helpful if you would answer the exact
> > >> questions
> > >> put to you when people reply - it saves everyone a lot of time.
> > >> Please
> > >> answer my questions inline - I've
> > >> updated them below
>
> > > 1) So while you are logged into the domain as *a* (not "the") domain
> > > administrator on a workstation, you cannot map to one of the shares on
> > > a DC
> > > without providing *the* domain admin credentials?
>
> > If you are logged on as a local administrator on a workstation (not the
> > AD domain administrator), you will be prompted for credentials to
> > access the shares on a DC.
>
> > > If I am on any machine, logged on with the domain administrator
> > > account I do not have any issues with being prompted mapping to c$ for
> > > example.
>
> > As expected.
>
> > > 2) Are you 100% sure your user ID is in the domain admins group?
>
> > > Yes I am 100% I am a member of the domain admins group. I have
> > > mentioned prior that all users in the domain admins group are
> > > experiencing the same issue.
>
> > If you are a member of the AD Domain Administrator group, you should be
> > able to access the C$ share on a DC.
>
> > Are you part of any group that has been denied access?
>
> > Have the C: drive permissions been altered in any way, possibly to
> > increase security?
>
> > > 3) If you copy the built-in domain Administrator account and log in as
> > > that new user, same results?
>
> > > Not sure I understand you. Please clarify.
>
> > Right click the Domain "Administrator" account, copy, and create an
> > account with a different name, password, etc. Test to see if you can
> > access the c$ share on the DC.
>
> > --
> > Ace
>
> > This posting is provided "AS-IS" with no warranties or guarantees and
> > confers no rights.
>
> > Please reply back to the newsgroup or forum for collaboration benefit
> > among responding engineers, and to help others benefit from your
> > resolution.
>
> > Ace Fekay, MCT, MCTS Windows 2008, MCTS Exchange, MCSE, MCSA 2003 &
> > 2000, MCSA Messaging
> > Microsoft Certified Trainer
>
> > For urgent issues, please contact Microsoft PSS directly. Please
> > checkhttp://support.microsoft.comforregional support phone numbers.-
> > Hide
> > quoted text -
>
> > - Show quoted text -
>
> Right click the Domain "Administrator" account, copy, and create an
> account with a different name, password, etc. Test to see if you can
> access the c$ share on the DC.
>
> This worked fine.
>
> ---
>
> If that worked fine, then that means there's a restriction in the
> account(s)
> that are not working.
>
> Ace- Hide quoted text -
>
> - Show quoted text -

===
> Can you provided any information on what it could possibly be. This
> was not always the case.

Difficult to speculate, other than possibly being a corrupted account, or
something is denying it as part of a group, whether directly configured or
in a GPO, such as a restricted group, reg setting, etc.

Ace
Re: Hidden Share [message #294903 is a reply to message #292481] Thu, 22 October 2009 13:26 Go to previous messageGo to next message
lanwench  is currently offline lanwench  United States
Messages: 1684
Registered: July 2009
Senior Member
Ace Fekay [MCT] <aceman@mvps.RemoveThisPart.org> wrote:

<snip>

>===
>> Can you provided any information on what it could possibly be. This
>> was not always the case.
>
> Difficult to speculate, other than possibly being a corrupted
> account, or something is denying it as part of a group, whether
> directly configured or in a GPO, such as a restricted group, reg
> setting, etc.
> Ace

Additionally, Bij - please learn to post inline/quote correctly. It's hard
to read your replies in the thread and we've ended up going over the same
things several times. For example, I had previously suggested you try
creating a new copy of the built-in account.

Don't use Google Groups to access the newsgroups - use a newsreader client &
the MS NNTP server.
Re: Hidden Share [message #294931 is a reply to message #294903] Thu, 22 October 2009 16:18 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:OYJyjH2UKHA.5584@TK2MSFTNGP05.phx.gbl...
> Ace Fekay [MCT] <aceman@mvps.RemoveThisPart.org> wrote:
>
> <snip>
>
>>===
>>> Can you provided any information on what it could possibly be. This
>>> was not always the case.
>>
>> Difficult to speculate, other than possibly being a corrupted
>> account, or something is denying it as part of a group, whether
>> directly configured or in a GPO, such as a restricted group, reg
>> setting, etc.
>> Ace
>
> Additionally, Bij - please learn to post inline/quote correctly. It's hard
> to read your replies in the thread and we've ended up going over the same
> things several times. For example, I had previously suggested you try
> creating a new copy of the built-in account.
>
> Don't use Google Groups to access the newsgroups - use a newsreader client
> & the MS NNTP server.
>


Google Groups don't follow the recommended RFCs for MIME type and header,
which is why we have problems when replying to a Google Group post. They are
the only forum that does that. I don't know why. Depending on the
newsreader, it may not indent the ">" symbol and almost treats it like an
RTF email, but since usenet is text based, it doesn't post well when
translated due to the header. I actually had to manually insert the ">" in
my response above, otherwise it would have blended in with the rest of the
threaded replies in the response and you wouldn't have been able where my
response started, or his ended.

Ace
Previous Topic:XP Machine Account Password Changes
Next Topic:47 KewaSa.com DDL Torrents
Goto Forum:
  


Current Time: Wed Jan 17 04:13:46 MST 2018

Total time taken to generate the page: 0.05423 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software