Click here to get back home

Windows service denied access to mapped drive

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Windows service denied access to mapped drive berni 05-04-2007
Posted by berni on May 4, 2007, 7:06 am
Please log in for more thread options
Hi

I have a windows service that monitors files on windows and unix
servers. Reflections NFS is installed and the UNIX paths are mapped
to drives. On my developer machine (XP) the service runs as expected
and can see the mapped unix drives.

After installing the service on Windows 2003 server SP1, the service
can no longer see the mapped drives, the error message returned is:
Could not find a part of the path "M:\". When trying the full path \
\ServerIPAddress\directory access is also denied.

On the server, the mapped drives are visible in Explorer and all files
can be seen.

Hoping someone can shed some light on this issue. Any ideas??

Thanks
Berni


Posted by Roger Abell [MVP] on May 4, 2007, 11:14 am
Please log in for more thread options

> Hi
>
> I have a windows service that monitors files on windows and unix
> servers. Reflections NFS is installed and the UNIX paths are mapped
> to drives. On my developer machine (XP) the service runs as expected
> and can see the mapped unix drives.
>
> After installing the service on Windows 2003 server SP1, the service
> can no longer see the mapped drives, the error message returned is:
> Could not find a part of the path "M:\". When trying the full path \
> \ServerIPAddress\directory access is also denied.
>
> On the server, the mapped drives are visible in Explorer and all files
> can be seen.
>
> Hoping someone can shed some light on this issue. Any ideas??
>

This sounds like that folders\files are shared out with permissions
allowing the account you used on server to test direct access via
Explorer but without permissions allowing the account the service
is running within.



Posted by Joe Richards [MVP] on May 4, 2007, 4:00 pm
Please log in for more thread options
There have been more and more changes in this area. Plain and simple,
you can no longer use mapped drives across sessions. Even if you have
user1 logged in and do a runas as user1 that new session won't have
access to the drive letters of the interactive session.

Microsoft has been telling people forever (like mid-90's at least) to
not use mapped drives with services.

This is just one article about this...

http://support.microsoft.com/kb/180362/EN-US/


Basically services should all use UNCs.



--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


berni wrote:
> Hi
>
> I have a windows service that monitors files on windows and unix
> servers. Reflections NFS is installed and the UNIX paths are mapped
> to drives. On my developer machine (XP) the service runs as expected
> and can see the mapped unix drives.
>
> After installing the service on Windows 2003 server SP1, the service
> can no longer see the mapped drives, the error message returned is:
> Could not find a part of the path "M:\". When trying the full path \
> \ServerIPAddress\directory access is also denied.
>
> On the server, the mapped drives are visible in Explorer and all files
> can be seen.
>
> Hoping someone can shed some light on this issue. Any ideas??
>
> Thanks
> Berni
>

Posted by berni on May 7, 2007, 8:30 am
Please log in for more thread options
wrote:
> There have been more and more changes in this area. Plain and simple,
> you can no longer use mapped drives across sessions. Even if you have
> user1 logged in and do a runas as user1 that new session won't have
> access to the drive letters of the interactive session.
>
> Microsoft has been telling people forever (like mid-90's at least) to
> not use mapped drives with services.
>
> This is just one article about this...
>
> http://support.microsoft.com/kb/180362/EN-US/
>
> Basically services should all use UNCs.
>
> --
> Joe Richards Microsoft MVPWindowsServer Directory Services
> Author of O'Reilly Active Directory Third Editionwww.joeware.net
>
> ---O'Reilly Active Directory Third Edition now available---
>
> http://www.joeware.net/win/ad3e.htm
>
>
>
> berni wrote:
> > Hi
>
> > I have awindowsservicethat monitors files onwindowsand unix
> > servers. ReflectionsNFSis installed and the UNIX paths are mapped
> > to drives. On my developer machine (XP) theserviceruns as expected
> > and can see the mapped unix drives.
>
> > After installing theserviceonWindows2003 server SP1, theservice
> > can no longer see the mapped drives, the error message returned is:
> > Could not find a part of the path "M:\". When trying the full path \
> > \ServerIPAddress\directory access is also denied.
>
> > On the server, the mapped drives are visible in Explorer and all files
> > can be seen.
>
> > Hoping someone can shed some light on this issue. Any ideas??
>
> > Thanks
> > Berni- Hide quoted text -
>
> - Show quoted text -

Hi Joe

thanks for your post.

Have done some more reading (and testing) and agree it can't be
resolved with logged-in user and service runas user combo as services
are run in their own sessions. Would be helpful if service behaviour
was the same for both XP and Server environments - as the service on
XP can see the mapped drives.

Will now investigate why the service cannot see UNC paths for the NFS
network.

Thanks
Berni



Posted by Joe Richards [MVP] on May 9, 2007, 10:16 pm
Please log in for more thread options
It isn't a purposely design decision to have it work on client but not
server, it is evolution of the OS overall, Windows Server 2003 came out
after XP. Check it out on Vista, that is the current client OS.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


berni wrote:
> wrote:
>> There have been more and more changes in this area. Plain and simple,
>> you can no longer use mapped drives across sessions. Even if you have
>> user1 logged in and do a runas as user1 that new session won't have
>> access to the drive letters of the interactive session.
>>
>> Microsoft has been telling people forever (like mid-90's at least) to
>> not use mapped drives with services.
>>
>> This is just one article about this...
>>
>> http://support.microsoft.com/kb/180362/EN-US/
>>
>> Basically services should all use UNCs.
>>
>> --
>> Joe Richards Microsoft MVPWindowsServer Directory Services
>> Author of O'Reilly Active Directory Third Editionwww.joeware.net
>>
>> ---O'Reilly Active Directory Third Edition now available---
>>
>> http://www.joeware.net/win/ad3e.htm
>>
>>
>>
>> berni wrote:
>>> Hi
>>> I have awindowsservicethat monitors files onwindowsand unix
>>> servers. ReflectionsNFSis installed and the UNIX paths are mapped
>>> to drives. On my developer machine (XP) theserviceruns as expected
>>> and can see the mapped unix drives.
>>> After installing theserviceonWindows2003 server SP1, theservice
>>> can no longer see the mapped drives, the error message returned is:
>>> Could not find a part of the path "M:\". When trying the full path \
>>> \ServerIPAddress\directory access is also denied.
>>> On the server, the mapped drives are visible in Explorer and all files
>>> can be seen.
>>> Hoping someone can shed some light on this issue. Any ideas??
>>> Thanks
>>> Berni- Hide quoted text -
>> - Show quoted text -
>
> Hi Joe
>
> thanks for your post.
>
> Have done some more reading (and testing) and agree it can't be
> resolved with logged-in user and service runas user combo as services
> are run in their own sessions. Would be helpful if service behaviour
> was the same for both XP and Server environments - as the service on
> XP can see the mapped drives.
>
> Will now investigate why the service cannot see UNC paths for the NFS
> network.
>
> Thanks
> Berni
>
>

Similar ThreadsPosted
CDROM Drive access denied October 31, 2005, 10:40 am
Windows 2003 services don't have access to mapped drives July 17, 2007, 8:45 pm
Re: Windows 2003: Folder Access Denied October 25, 2005, 10:13 pm
Windows 2003: Folder Access Denied October 24, 2005, 9:06 am
DCOM access denied error on Windows 2003 server SP1 January 13, 2006, 10:35 am
Access to NT4 File Ressources denied from Windows 2003 System April 7, 2006, 2:49 am
Windows domain user is sometimes denied access to server share October 2, 2006, 5:07 am
openCertStore() denied to Network Service September 19, 2007, 3:04 pm
Drive Access Restriction April 20, 2006, 12:33 am
Drive access to particular user December 3, 2006, 7:54 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap