Access Denied Errors When Everyone Set to Full Control

SUMMARY

There are three situations in which you will receive an "Access Denied" message across untrusted domains when accessing a resource that has permissions for Everyone.

1. When a user from an untrusted domain attempts to access the server and they have the same user name with a different password defined in that domain, they'll be prompted for a password or receive an "Access Denied" message depending on the operation.

   Workaround

   For accessing file servers on the other domain, you can work around this problem by providing the correct DOMAIN/USERNAME in the Connect As dialog box in File Manager and then providing the correct password. Otherwise, if the user has the same user name on both domains, make sure that the passwords match, or set up a two-way trust relationship between the two domains.
2. The Guest account on the domain is disabled. This is the default for Windows NT Advanced Server. If a user from an untrusted domain is trying to access the server remotely, they will receive an "Access Denied" message because there is no valid user name that they can use to make the connection.

   Workaround

   Enable the Guest Account on the Windows NT Advanced Server.
3. If your account or all of the groups you belong to do not have the right to "access this computer from network," you will receive this error message.

   Workaround

   Use User Manager to add the "access this computer from network" right to your account.