Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Account protection RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,
     
    I would protect one or more accounts on WHS, but even if I create the account with NO ACCESS, everybody can access, read and write.
    How can I protect the files.

    Thank's
    yves
    Tuesday, September 9, 2008 5:57 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Yves, 
    you are using the shortcut Shared folders on server for accessing the files or any other methods?
    On the client PC, have you ever established a connection to the server using the Administrator account and the console password and checked the box to remember the password? You can check this in control panel, where exactly depends from the operating system of the client. You are logged on on a local client PC with that new account or how do you perform the access exactly?

    Or did you add users/groups on the WHS manually to the local Administrators group? (Could also be that the server has been hacked and therefore the security is compromised.)

    You can perform some checks on the server desktop (do not change any settings unless told so to do):

    • Click Start/Run and type compmgmt.msc. Click OK.
    • Open Local Users and Groups/Users.
    • Doubleclick the test user account.
    • Click on Member of tab.

    Which groups are listed here?

    • Now open drive D: in Windows Explorer.
    • Navigate to D:\shares\users and right click one of the folders in question, to which the user should have no access according to the settings in the console.
    • Select Properties from context menu and open the Security tab.

    Verify the groups listed here with the membership list of the user account, you got before.
    Are here visible overlappings?
    Close the dialogs without changing anything and return to here with your results.

    Best greetings from Germany
    Olaf

    Thursday, September 18, 2008 9:26 AM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    I assume when you say "...create the account with NO ACCESS..." you mean that you're setting the rights for User A's folder so that User B should have no access, but User B can still get to that folder? Probably the Guest account is active, has no password, and has access.

    Turn off the Guest account, give the Guest account a password, or deny the Guest account access to the share in question.
    I'm not on the WHS team, I just post a lot. :)
    Tuesday, September 9, 2008 7:05 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    I'll try that and give you the result.

    Thank's
    yves
    Wednesday, September 10, 2008 10:01 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,

    I have tried and nothing changed.
    What could I do????

    thank's

    yves
    Wednesday, September 17, 2008 4:42 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,

    You have selected Properties on each Folder in Shared Folders, and set the permissions under User Access correctly?

    Colin
    If anyone answers your query successfully, please mark it as 'Helpful', to guide other users.
    Wednesday, September 17, 2008 4:56 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote
    Yes of course.... That's the first thing I did...

    Yves
    Thursday, September 18, 2008 8:42 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Yves, 
    you are using the shortcut Shared folders on server for accessing the files or any other methods?
    On the client PC, have you ever established a connection to the server using the Administrator account and the console password and checked the box to remember the password? You can check this in control panel, where exactly depends from the operating system of the client. You are logged on on a local client PC with that new account or how do you perform the access exactly?

    Or did you add users/groups on the WHS manually to the local Administrators group? (Could also be that the server has been hacked and therefore the security is compromised.)

    You can perform some checks on the server desktop (do not change any settings unless told so to do):

    • Click Start/Run and type compmgmt.msc. Click OK.
    • Open Local Users and Groups/Users.
    • Doubleclick the test user account.
    • Click on Member of tab.

    Which groups are listed here?

    • Now open drive D: in Windows Explorer.
    • Navigate to D:\shares\users and right click one of the folders in question, to which the user should have no access according to the settings in the console.
    • Select Properties from context menu and open the Security tab.

    Verify the groups listed here with the membership list of the user account, you got before.
    Are here visible overlappings?
    Close the dialogs without changing anything and return to here with your results.

    Best greetings from Germany
    Olaf

    Thursday, September 18, 2008 9:26 AM
    Moderator