I am having some difficulty with running a batch file, Im pretty sure its a permissions issue. Loggedonlocally to the Server 2003 box under the Administrator account it runs fine. I want a domain user to be able to run it but it wont run for him. He runs it over a TS session. I have set the security permissions for the file to Full Control for him.When he runs it from a folder that mydomain\users have Full Control of, it wont run. This folder inherits permissions from the parent folder.If he runs it from his personal folder (Full Control ), it wont run. Both these folder are mapped drives in the TS session. Also, both these folders have an "unknown user" that has Full Control in the security properties.If anyone can point out what the problem is, I would appreciate it!

what about share permission, Check the share permission and give him full control.try that and let me know. also make sure the domain group has access to do the activity for the user.

As stated, Ive tried it with giving him full control over the shares. Im not sure about what youre sayingabout the domain group. OU?

Why are questions marked as answered when they are not?

Why are questions marked as answered when they are not? Ask David.But you, as original poster have the authority to unmark it.You can also unmark my proposal of an answer on your last. That was a mistake.As to your original question, there are two sets of permissions involved and the lesser of them will be used.Click the folder, and select File\Properties (or Properties on the right-click menu). You need to set permissions on both the sharing tab and on the security tab. On the sharing tab, use the "Advanced" button.For best results, set the share permissions to Full Control for Everyone, and assign any specific permissions on the security tab. Using the Advanced button on the security tab, you can clear the "inherit" box to block permissions of the parent folder. You can also change the owner here and you can select for all sub folders and files to have the same security.

apologies for the delay, I was sick.The user has full control of the directory in which the batch file resides. Ditto for the output text file. The effective permissions of the parent folder for the group he is in, 'domain users',are:traverse folder/execute filelist folders/list dataread attributesread extended attributescreate file/write datacreate folders/append dataread permissionsThese permissions cannot be changed because it would not be appropriate for the other child folders. I temporarily took him out of the domain users group and put him in the domain admins group, that did not work. From the command line, logged on as him, in that folder R:\>batch.batThe system cannot find the drive specified.Path not found - E:\acme\acme_exec\execdb.mdbMeanwhile, Im looking right at execdb.mdb in the exact place the system says it cant find it in. I tried using an UNC path instead but got this output:CMD does not support UNC paths as current directories.As is the case from the beginning, logged on as Administrator, it runs fine for me.