PSS ID Number: 149523
Article Last Modified on 12/16/2003
The information in this article applies to:
- Microsoft Windows NT Workstation 3.5
- Microsoft Windows NT Workstation 3.51
- Microsoft Windows NT Server 3.5
- Microsoft Windows NT Server 3.51
This article was previously published under Q149523
SYMPTOMS
In Windows NT versions 3.5 and 3.51, if you try to connect to an
administrative share as a regular domain user without any special
privileges, you will receive the following error:
Access is Denied.
In Windows NT version 3.5, if you try to connect to an administrative share
as a member of the Server Operators group, you will be connected with full
control.
In Windows NT version 3.51, if you try to connect to an administrative
share as a member of the Server Operators group, you will be able to
connect to the share and a drive will be mapped to the share in file
manager but you will not have access to the share. The left side of the
screen in File Manager will show the path to the administrative share and
the right side which, usually displays the available files will show:
You do not have permission to access this directory.
CAUSE
On page 471 of the System Guide, C$ and ADMIN$ shares are discussed. The
guide says that only members of the Administrators, Backup Operators, and
Server Operators groups can connect to these shares.
The documentation is correct in saying that these users can connect to
these shares but fails to elaborate that the Server Operators members can
not access the files in these shares. The access to the administrative
shares has been minimized by default to make the network more secure.
Backup Operators retain permission to access files in these
administrative shares, based on the assumption that backing up the data in
these administrative shares is a critical function.
WORKAROUND
To work around this problem, complete the following steps:
- Log on as an administrator.
- Go into File Manager and highlight the share you want to give Server
Operators permissions to.
- Choose 'Disk' from the toolbar menu and select 'Share As...'
- In the Shared Directory dialogue box, select the 'New Share' button.
Enter the share name, path, and comment.
- Select the 'Permissions...' button. Add the Server Operators group and
grant its members full control. Remove the group Everyone.
The Server Operators will now be able to access this share with the share
name you specified.
Additional query words: prodnt 3.5
Keywords: KB149523
Technology: kbWinNT350search kbWinNT351search kbWinNTS350 kbWinNTS350search kbWinNTS351 kbWinNTS351search kbWinNTsearch kbWinNTSsearch kbWinNTW350 kbWinNTW350search kbWinNTW351 kbWinNTW351search kbWinNTWsearch