Server Operators Cannot View Administrative Shares in NT

• Microsoft Windows NT Workstation versions 3.5, 3.51
• Microsoft Windows NT Server versions 3.5, 3.51

SYMPTOMS

In Windows NT versions 3.5 and 3.51, if you try to connect to an administrative share as a regular domain user without any special privileges, you will receive the following error:

Access is Denied.

You do not have permission to access this directory.

CAUSE

On page 471 of the System Guide, C$ and ADMIN$ shares are discussed. The guide says that only members of the Administrators, Backup Operators, and Server Operators groups can connect to these shares.

The documentation is correct in saying that these users can connect to these shares but fails to elaborate that the Server Operators members can not access the files in these shares. The access to the administrative shares has been minimized by default to make the network more secure. Backup Operators retain permission to access files in these administrative shares, based on the assumption that backing up the data in these administrative shares is a critical function.

WORKAROUND

To work around this problem, complete the following steps:

1. Log on as an administrator.



2. Go into File Manager and highlight the share you want to give Server Operators permissions to.



3. Choose 'Disk' from the toolbar menu and select 'Share As...'



4. In the Shared Directory dialogue box, select the 'New Share' button. Enter the share name, path, and comment.



5. Select the 'Permissions...' button. Add the Server Operators group and grant its members full control. Remove the group Everyone.

Additional query words: prodnt 3.5

Keywords : ntdocerr
Version : 3.50 3.51
Platform : WINDOWS
Issue type :