I have a Windows 7 PCSP1, Windows 2000sp4 server.User has a redirected homefolder to this server as \\server\user$. The user has full control.The user can save documents to this share. However the user is running an application and is trying to open a file on the share and gets access denied.If the user logs onto a XP machine, the application runs perfectly. I have checked NTFS permissions and the user has full control and is the creator owner of folders\documents etc. Any ideas?? The Win 7 PC has also been rebuilt and the issue still occurrs.many thanks

Hi MisterD101, Thanks for the post! Based on your description, the user's permission is OK, there could be some security issue between Windows 7 and Windows 2004SP4 server. Temporarily turn off the firewall and change the following setting on your Windows 7 client to check if it works: 1. Local Policies - Security Option. Double-click "Network Security: LAN Manger authentication level", select "Send LM&NTLM - use NTLVv2 session security if negotiated". Then apply the settings. 2. In Control Panel - Network and Sharing center - Advanced sharing settings. Set as following: Enable network discovery Turn on file and print sharing Turn off password protected sharing Use user accounts and passwords to connect to other computers Use 128 bit encryption 3. In the Local Group Policy Editor. Navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Settings Enable the following: Network access: Allow anonymous SID/name translation Network access: Let Everyone permissions apply to anonymous users Disable the following: Network access: Restrict anonymous access to Named Pipes and Shares Network access: Do not allow anonymous enumeration of SAM accounts Network access: Do not allow anonymous enumeration of SAM accounts and shares Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thansk for your reply, I will give it a go and let you know the results, regards many thanks

Hi MisterD101, Thanks for the post! Based on your description, the user's permission is OK, there could be some security issue between Windows 7 and Windows 2000SP4 server. Temporarily turn off the firewall and change the following setting on your Windows 7 client to check if it works: 1. Local Policies - Security Option. Double-click "Network Security: LAN Manger authentication level", select "Send LM&NTLM - use NTLVv2 session security if negotiated". Then apply the settings. 2. In Control Panel - Network and Sharing center - Advanced sharing settings. Set as following: Enable network discovery Turn on file and print sharing Turn off password protected sharing Use user accounts and passwords to connect to other computers Use 128 bit encryption 3. In the Local Group Policy Editor. Navigate to Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Settings Enable the following: Network access: Allow anonymous SID/name translation Network access: Let Everyone permissions apply to anonymous users Disable the following: Network access: Restrict anonymous access to Named Pipes and Shares Network access: Do not allow anonymous enumeration of SAM accounts Network access: Do not allow anonymous enumeration of SAM accounts and shares Regards, Miya This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I forgot to add in my original post, this PC has been rebuilt by MDT2010 and I have a the same build in my lab and this application works fine.many thanks

How's going now? So you mean this problem only happened on this PC after rebuilt? Is it a domain-joined PC? If so, re-join the domain to check if it works. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Recap: Windows 7SP1 joined to a domain, the computer account is OK,the computer and user can both access shares. We have enabled folder redirection for the users profile,the user has full control on the profile. When the user tries to run an application which access a file on the users profile an access denied message is shown. When the user logs into an XP machine with profile redirection, it works.The user can save documents into the share and open the file using applications.The NTFS permissions on the file is everyone full control. many thanks