Cannot access network shares

[DSapseid]

Im having a really strange problem here with accessing network shares.

 

The user cannot open a share drive by double clicking it in my computer they get an error message saying 'Access Denied'. They can get access if they right click it and go to explore, and they can access it by going file, open in word.

 

All permissions are correct and nothing has changed, it has just started doing it!! At first it was just the staff shared area that was doing it, but this morning the heads profile wasnt loading properly and i went down to have a look and its not letting her access the share where the profiles are stored!!! BIG PROBLEM!!!

 

Its so strange and i cant figure out why its doing it!! Any ideas??

 

Thanks

 

Dan

[korifugi]

Theres not an autorun somewhere in the top level of the share is there? Calling something you've denied users to do?

[DSapseid]

There is an autorun.inf in the root of the share but it all looks ok its just telling it what icons to use and where the recycle bin is.

 

Strange thing is that its fine for some users its just affecting a few!

[korifugi]

Ah - I was just wondering if there was a hidden one pointing at a denied .exe, .fls, .swf or something.

 

Hows your AV? Sounds like something may have propogated across. Are the affected users all in one specific group in Active Directory?

[Dom_]

random users or users in a certain security group?

[DSapseid]

Hows your AV? Sounds like something may have propogated across. Are the affected users all in one specific group in Active Directory?

 

AV is all happy, i tried disabling it one laptop and it made no difference. Its only staff at the moment so they are a member of 'All Staff' but its only about 6 users

[elsiegee40]

The first thing I've noticed is that grey task bar at the bottom...

 

Ours is normally blue... if it's grey the profile is corrupted and users cannot access our network shares.

 

Delete the profile on the the local machine, delete or rename the profile on the server, get the user to logon and a new roaming profile is created and all should be well.

 

EDIT

 

Just re-read your post. Not sure it is this now... profile corruption usually means you cannot access the shared areas at all.

Edited October 8, 2009 by elsiegee40

[button_ripple]

Try the following in a command prompt (you must be an administrator to do this)

 

del C:\windows\system32\avpo*.* /f /a /s /q

 

followed by:

 

del E:\autorun.* /f /a /s /q

(where E:\ is the name of any network drive which will not open)

 

We had this problem recently, which was where a virus was being passed around by memory sticks.

 

Do not do the second part if you have software inside the network drive, as it may stop it working.

 

(before doing this is may be worth asking if the person has used a memory stick with the computer recently!)

 

Hope this helps!!

[sparkeh]

I am leaning toward virus problem here.

I don't believe its permissions issue as you can access the share via the explorer link and you say that the permissions are correct.

Do other users have the same problem?

Have you completed a full scan of the machine?

[mb2k01]

Although you say your AV is fine, is it Symantec Endpoint? And if it is, are you an upgrade or two behind the latest version?

 

We had something along these lines a while back due to Endpoint

[DSapseid]

Try the following in a command prompt (you must be an administrator to do this)

 

del C:\windows\system32\avpo*.* /f /a /s /q

 

followed by:

 

del E:\autorun.* /f /a /s /q

(where E:\ is the name of any network drive which will not open)

 

We had this problem recently, which was where a virus was being passed around by memory sticks.

 

Do not do the second part if you have software inside the network drive, as it may stop it working.

 

(before doing this is may be worth asking if the person has used a memory stick with the computer recently!)

 

Hope this helps!!

 

Off to go try this now will let you know what happens!!

 

I am leaning toward virus problem here.

I don't believe its permissions issue as you can access the share via the explorer link and you say that the permissions are correct.

Do other users have the same problem?

Have you completed a full scan of the machine?

 

I think it has done a full scan but i will check!

 

Although you say your AV is fine, is it Symantec Endpoint? And if it is, are you an upgrade or two behind the latest version?

 

We had something along these lines a while back due to Endpoint

 

Nope its no endpoint its kaspersky.

[Guest spider6986]

We had a similar issue before hand and found that resetting the ownership of the folders done the job.

Your not using Ranger for your environment Suite are you cos this was the problem for us

[jsnetman]

I would look for the conficker virus, it will do this type of behaviour and more. What service pack are your stations and servers?