Click here to get back home

Getting Access is Denied
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Getting Access is Denied Brad 03-02-2006
Posted by Brad on March 2, 2006, 6:30 pm
Please log in for more thread options
 I have two separate domains. When attempting to access 1 server (which
happens to be our file server) from domain 1 to domain 2 via \fqdn, I
get access is denied. I also get access is denied via \IP address.
However, I can ping our file server by name and IP from domain 1.
Resolves without issue. I also can connect to multiple 2k3 servers and
XP workstations from domain 1 to domain 2 by \fqdn and \IP Address. I
have compared local security policies and checked NTFS security.
Nothing obvious stands out. Anybody have any ideas?
Thanks


Posted by Roger Abell [MVP] on March 2, 2006, 8:21 pm
Please log in for more thread options
 You did not mention checking the share level permissions, or
the user right to log on over the network (and the deny of same)

>I have two separate domains. When attempting to access 1 server (which
> happens to be our file server) from domain 1 to domain 2 via \fqdn, I
> get access is denied. I also get access is denied via \IP address.
> However, I can ping our file server by name and IP from domain 1.
> Resolves without issue. I also can connect to multiple 2k3 servers and
> XP workstations from domain 1 to domain 2 by \fqdn and \IP Address. I
> have compared local security policies and checked NTFS security.
> Nothing obvious stands out. Anybody have any ideas?
> Thanks
>



Posted by Brad on March 2, 2006, 8:52 pm
Please log in for more thread options
When accessing the file server while in the same domain, it works
without issue. It's just when accessing it from domain 2 that I get the
access is denied error. \servername or \IP Address reports Access is
Denied. 9 times out of 10 \IP Address will work and it will be a name
resolution issue. This must be the 10th time. Strange that every other
computer I attempt to access in domain 1 from domain 2 challenges me
for authentication. Does this clear up my issue at all? I appreciate
the help.


Posted by rg on March 3, 2006, 2:34 am
Please log in for more thread options
do you have AD trusts setup between these two domains?


> When accessing the file server while in the same domain, it works
> without issue. It's just when accessing it from domain 2 that I get the
> access is denied error. \servername or \IP Address reports Access is
> Denied. 9 times out of 10 \IP Address will work and it will be a name
> resolution issue. This must be the 10th time. Strange that every other
> computer I attempt to access in domain 1 from domain 2 challenges me
> for authentication. Does this clear up my issue at all? I appreciate
> the help.
>



Posted by Roger Abell [MVP] on March 3, 2006, 8:59 am
Please log in for more thread options
No, it does not clear up view of the scenario.
Two domains, one forest or two? Everything here is AD, right?
How is DNS set up ? All involved machines MUST use ONLY
DNS servers that are able to resolve all involved domains' DCs
based on the SRV records in the DNS zones supporting those
domains. Usually this means the DNS servers on the DCs, and
since there are multiple domains there can be issues of how the
DNS services for each domain are defined to interact with those
of the other domain.
Basically, as I now hear your scenario
you have two domains (how related? what OSs?)
access to resource (print) in one domain is attempted from the other.
(using an account from which domain?)
This sometimes works, sometimes does not (on a single machine?)
Are you saying this problem exists only on one machine, and every
other in the second domain does not show the problem?
Are you saying use of \ip does work 90% of time from machine
where this issue is seen, but then 10% of time from that same
machine using the same account it does not ?

> When accessing the file server while in the same domain, it works
> without issue. It's just when accessing it from domain 2 that I get the
> access is denied error. \servername or \IP Address reports Access is
> Denied. 9 times out of 10 \IP Address will work and it will be a name
> resolution issue. This must be the 10th time. Strange that every other
> computer I attempt to access in domain 1 from domain 2 challenges me
> for authentication. Does this clear up my issue at all? I appreciate
> the help.
>



Similar ThreadsPosted
DRA and access denied September 28, 2006, 10:13 am
Everybody denied access to a folder June 19, 2006, 4:52 am
Access XP Permission Denied July 12, 2006, 9:52 pm
CDROM Drive access denied October 31, 2005, 10:40 am
Certificate services Access Denied November 9, 2005, 9:02 pm
Access denied to event viewer? December 22, 2005, 4:07 pm
DCOM access denied after SP1 applied January 6, 2006, 3:46 pm
Event Viewer Access Denied January 27, 2006, 12:37 pm
EnumPrinters(PRINTER_ENUM_NAME) = Access Is Denied September 25, 2006, 10:20 am
Access Denied after changing Servers September 25, 2006, 8:03 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap