Windows 7 security question - file permissions and other problems
Did Windows 7 change some behind the scenes security/permissions?We've got a Windows 2008 file server that hosts domain admin user directories. These users map a drive letter directly to their user folder (F:) (\\server\user\%username). This directory is shared with Creator Owner, Domain Admins, System and Everyone. They also have full security rights to the folder. Domain Admin is the folder owner.On a Windows 7 RC box, if the user tries to save directly to their F:\ drive, they don't have permission. In fact, if they browse to their F:\ drive and right click, they don't even have a New option in the context menu. Now if they browse to the \\server\user folder then manually select their user directory, they can save documents and create new. Same exact location, same rights, only difference is how they are accessing it.If the user is using a Windows XP or Vista box, they can save and create New in their F:\ drive directly with no problems what so ever. This is leading us to believe some behind the scenes permissions/security changes in Windows 7.If we blow away their user directory and let it recreate on the users next login, sometimes they have access tocreate New, sometimes not. There's no consistency.Also to note, on the WIN7 box even though I cannot directly create a new document on the F:\ share, if I use a command prompt, I can make a new directory there.I'm sure we are not the only ones to have run into this problem.
May 15th, 2009 4:55pm

Bricke,I've run into the same problem and I haven't had any luck searching for a solution. The only real difference in my case is that the home folder is located on a Windows 2003 R2 SP2 server rather than a 2008 server as is your case. Even though I am a Domain Admin with Full control of the directory the 'New' option is unavailable and I cannot save new files to the root of the home directory, although I can edit a file in the root and save changes. If I open Windows Explorer and manually type in the path to the home folder, eg. \\domain.dfs\userdata\private\USERNAME then the New command is available along with all normal functions.Did you ever find a solution to this?I've tried disabling UAC andrunning Windows Explorer as an Admin but I've had no luck.
Free Windows Admin Tool Kit Click here and download it now
June 10th, 2009 6:14pm

I have not found a solution, but I have seen other people with this same problem. In the meantime we are just working around it by mapping drives one level higher and browsing in as needed. I hope MS takes a look at this problem.
June 10th, 2009 7:26pm

This is still a problem, and I'm seeing more people with this issue.Here's another thread with people having the same issues.http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/4ea2f28f-8487-40cf-abb0-745916e72b7aAny word on this MS??
Free Windows Admin Tool Kit Click here and download it now
August 17th, 2009 5:37pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics