[AccessD] Slightly OT - network shares question

Mark Simms marksimms at verizon.net
Sun Jul 5 21:20:15 CDT 2009


Thanks much Stuart....
I see now that it was a matter of my AD id not having the proper authority.


> -----Original Message-----
> From: accessd-bounces at databaseadvisors.com
> [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of
> Stuart McLachlan
> Sent: Saturday, July 04, 2009 6:47 PM
> To: Access Developers discussion and problem solving
> Subject: Re: [AccessD] Slightly OT - network shares question
>
> It al depends on the "trust relationships"
> You have no rights to do acces or use on a domain other than
> the one you authenticate through unless the other domain has
> been set up to "trust" your domain.
>
> Example 1:  SQL Server access rights can eith be controlled
> by Active Directory or by SQL Server Login authentication.
>
> Using AD, your domain credentials you gain access rights to
> SQL Server based on what the SQL administator assignes and
> rights to  other domain resources that you have been granted
> access to by the Domain Administrator.
>
> Using SQL Server login, you have whatever rights the  SQL
> administrator assigns to you
> wihtin SQL Server.   The SQL Server administrator can't gives
> you rights to  any other
> domain resources - certainly not the right to read a
> directory on a computer you don't have
> the domain rights to access.
>
> Looks like Example 2 is the second scenario.
>
>
> Second verse, same as the first, a little bit louder and a
> little but worse <g>
>
> Cheers,
> Stuart
>
> On 4 Jul 2009 at 14:38, Mark Simms wrote:
>
> > Given a corporate Windows network environment that has multiple
> > domains, if one assumed that the network was all connected thru
> > routers, bridges, switches, etc (I'm no network engineer),
> wouldn't be
> > a very simple task to make a share to connect one domain's
> server's folder to another ?
> >
> > One Example: I was working with SQL Server on a server
> called XXX001
> > and it was addressable from my login domain.
> > However, I could not BCP or even do an xp_cmdshell "DIR" to
> any of the
> > network shares that were made available to me.
> > I always got "access denied" from SQL Server.
> > Was this a network issue or a SQL Server role/rights issue ?
> >
> > Another Example: Crystal reports was running from one
> server called YYY003.
> > I couldn't extract the report files to any of my login's
> network shares.
> > Couldn't they have easily introduced a permanent share on YYY003 to
> > point to a folder in one of the shares I could read/write to ?
> > This wasn't hard, correct ?
> >
> > --
> > AccessD mailing list
> > AccessD at databaseadvisors.com
> > http://databaseadvisors.com/mailman/listinfo/accessd
> > Website: http://www.databaseadvisors.com
>
>
> --
> AccessD mailing list
> AccessD at databaseadvisors.com
> http://databaseadvisors.com/mailman/listinfo/accessd
> Website: http://www.databaseadvisors.com
>






More information about the AccessD mailing list