User Permissions Differ from Computer to Computer

User Permissions Differ from Computer to Computer

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
User Permissions Differ from Computer to Computer Nate Greenberg via WinServerKB 10-24-2005
Posted by Nate Greenberg via WinServerKB on October 24, 2005, 7:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm having a problem on a small domain where a user who logs onto one
computer with their account gets different privelages on a Server on the
domain than when they log onto another computer. I manage a GIS Server
running 2003 Server. I have a folder/file structure setup that encompasses
shared folders with specific permissions associated with them, and their
subfolders. The users who have access to these folders are being managed with
Group Policies as a whole, then at the individual user level for the specific
folders that they have write access to.

There is one computer in particular on the domain that when one user in
particular logs onto has a completely different set of rights to the folders
on my server than anyone else. When any other user within the same security
group logs onto that computer, they have the correct rights. And when this
particular user logs onto any other computer on the domain, they have the
appropriate rights, just not when she logs onto her computer.

In looking at the list of computers in Active Directory, comparing it to
others, etc, there is nothing that I can see that is any different. But there
is obviously something different for just her on that machine. Any ideas??

Posted by Steven L Umbach on October 24, 2005, 7:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Check to see if the user is accessing the share with a mapped drive that has
persistent credentials that may have a different user that himself and also
if the computer is XP Pro then check to see if it has any stored credentials
for that user. You can check the security log of the server looking for a
type 3 network logon events from that computer to see what account is being
used to access the server or use Computer Management/shared folders -
sessions to see if it shows that user connected to the share from that
computer or another user when he is accessing the share. --- Steve

http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prdp_log_vkxx.asp

--- XP stored credentials.



> I'm having a problem on a small domain where a user who logs onto one
> computer with their account gets different privelages on a Server on the
> domain than when they log onto another computer. I manage a GIS Server
> running 2003 Server. I have a folder/file structure setup that encompasses
> shared folders with specific permissions associated with them, and their
> subfolders. The users who have access to these folders are being managed
> with
> Group Policies as a whole, then at the individual user level for the
> specific
> folders that they have write access to.
>
> There is one computer in particular on the domain that when one user in
> particular logs onto has a completely different set of rights to the
> folders
> on my server than anyone else. When any other user within the same
> security
> group logs onto that computer, they have the correct rights. And when this
> particular user logs onto any other computer on the domain, they have the
> appropriate rights, just not when she logs onto her computer.
>
> In looking at the list of computers in Active Directory, comparing it to
> others, etc, there is nothing that I can see that is any different. But
> there
> is obviously something different for just her on that machine. Any ideas??



Similar ThreadsPosted
Permissions to Rename a Computer within an AD domain February 16, 2006, 10:10 am
Computer Hacker is illegally creating a new logon on my computer November 10, 2007, 9:32 pm
Computer and User Certificates Issues September 22, 2005, 9:39 am
Track user/computer/ip by Caller Logon ID April 28, 2008, 1:20 am
Computer to Computer NtLmSsp authentication errors ? October 6, 2006, 5:25 pm
0x80070569: Logon failure: the user has not been granted the requested logon type at this computer. December 22, 2005, 9:06 am
User permission to open Open files in Computer Management May 16, 2008, 4:56 am
Computer cert/User cert 802.x Authentication query August 7, 2007, 5:20 am
Did someone take over my computer? November 24, 2006, 1:23 pm
policy for one computer July 26, 2005, 10:35 am

The site map in XML format XML site map

Contact Us | Privacy Policy