Tom, Our Developers run VSS. The data is on a NT4 BDC that is the only NT4 BDC in a single Domain AD W2K Forest. The FSMO is W2K SP3. The domain is mixed mode. I have a two Global Groups for VSS. VSS-FC (Members have Full Control - Share and NTFS permissions) and VSS-CH (Members have Change Control - Share and NTFS permissions). The groups Domain Admins and System also have Full Control to the VSS shareset (Share and NTFS). Then I just populate the groups (VSS-FC and VSS-CH). It all works easier this way. Make sure Share permissions are not biting you.
Rocky Habeeb Microsoft Systems Administrator James W. Sewall Company Old Town, Maine ____________________________________________________________ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kern, Tom Sent: Tuesday, May 04, 2004 3:44 PM To: ActiveDir (E-mail) Subject: [ActiveDir] OT: riddle me this I have a devloper who is running visual source safe and has had issues since day one logging in(to VSS). The app just uses its own internal db of users for auth, not AD. However the files reside on an ntfs share. Here's my confusion- I put this devloper into the domainadmins group as a test. he cannot change the attributes of files from read-only to read. He gets an access denied error. He cannot create files in a dir he has been given explicit access(full control). still gets an access denied. I've tried from different machines from win2k sp4 to winxp sp1 and still the same issue. The files and dirs reside on a AD win2k dc. We are a win2k mixed mode domain. could an account have gotten corrupted or screwed? and how could i tell? running ethereal when he connects only gives me what I know- smb nt file access denied. what the heck is going on here? thanks List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
