I am getting crazy. We connected our Windows 2008 to the domain. We made
share, give share rights to everyone and in security added users. When
we try to connect to the share by:
\\Ipnumber\Share$
It not work. What the hell is with Windows 2008?
Marcus
What do you mean by "not work"? What error? Access is denied? Can't find
network path?
--
Jabez Gan
Microsoft MVP: Windows Server
http://www.msblog.org
"MarcusB" <marcusb@llunet.se> wrote in message
news:ugdeJB8mIHA.5944@TK2MSFTNGP03.phx.gbl...
>I am getting crazy. We connected our Windows 2008 to the domain. We made
>share, give share rights to everyone and in security added users. When we
>try to connect to the share by:
>
> \\Ipnumber\Share$
>
> It not work. What the hell is with Windows 2008?
>
>
> Marcus
When I disable firewall att all than I can access all shares from
another machines in the network but when is enable firewall than it does
not work.
In simple firewall setting File and printer sharing is enabled in exceptions
But there is two entries for File and Printers sharing in Exceptions. In
the other one Group Policy is Yes.
What should I change in firewall to be able to access all shares on the
server???
Marcus
Jabez Gan [MVP] wrote:
> What do you mean by "not work"? What error? Access is denied? Can't find
> network path?
>
Delete button is inactive in exceptions, and I can not change it.
MarcusB
Jabez Gan [MVP] wrote:
> What do you mean by "not work"? What error? Access is denied? Can't find
> network path?
>
Hey Marcus,
In your Windows Server 2008, click Start and type:
WF.msc
Click Inbound Rules.
Under File and Printer Sharing *, make sure that it is set to Enable under
Domain Profile. You'll see a few File and Printer Sharing and enable all
which is under Domain Profile.
--
Jabez Gan
Microsoft MVP: Windows Server
http://www.msblog.org
"MarcusB" <marcusb@llunet.se> wrote in message
news:eBcWSW8mIHA.4076@TK2MSFTNGP05.phx.gbl...
> When I disable firewall att all than I can access all shares from another
> machines in the network but when is enable firewall than it does
> not work.
>
> In simple firewall setting File and printer sharing is enabled in
> exceptions
> But there is two entries for File and Printers sharing in Exceptions. In
> the other one Group Policy is Yes.
> What should I change in firewall to be able to access all shares on the
> server???
>
>
> Marcus
>
>
>
> Jabez Gan [MVP] wrote:
>> What do you mean by "not work"? What error? Access is denied? Can't find
>> network path?
>>
The problem is that I can not change rules responsible for file sharing
for Domain Profile from ws.msc. When I try it, than it says the rules
was modified by System Administrator and can not be modified, and
everithing is grayed. How to modified it???
It does not matter if I logged as domain Admin or local Administrator.
Regards
Marcus.
Jabez Gan [MVP] wrote:
> Hey Marcus,
>
> In your Windows Server 2008, click Start and type:
> WF.msc
>
> Click Inbound Rules.
>
> Under File and Printer Sharing *, make sure that it is set to Enable
> under Domain Profile. You'll see a few File and Printer Sharing and
> enable all which is under Domain Profile.
>
Check attachment
Jabez Gan [MVP] wrote:
> Hey Marcus,
>
> In your Windows Server 2008, click Start and type: WF.msc
>
> Click Inbound Rules.
>
> Under File and Printer Sharing *, make sure that it is set to Enable
> under Domain Profile. You'll see a few File and Printer Sharing and
> enable all which is under Domain Profile.
>
Jabez Gan [MVP] wrote:
> Hey Marcus,
>
> In your Windows Server 2008, click Start and type:
> WF.msc
>
> Click Inbound Rules.
>
> Under File and Printer Sharing *, make sure that it is set to Enable
> under Domain Profile. You'll see a few File and Printer Sharing and
> enable all which is under Domain Profile.
>
Hey Marcus,
Please try the following:
1. Open GPMC.MSc
2. Navigate to Default Domain Policy (Or create a new poliicy)
3. Under the Action, select Edit.
4. Group Policy Editor will open. Navigate to Windows Firewall with Advanced
Security - LDAP://<DN>
5. Click Inbound Rules
6. Create a New Rule which allows the File and Sharing.
Sorry for the earlier confusion - we can't modify a domain profile's
policies through WF.msc.
--
Jabez Gan
Microsoft MVP: Windows Server
http://www.msblog.org
"MarcusB" <bafi@linux.nu> wrote in message
news:u6t9T6$mIHA.4196@TK2MSFTNGP04.phx.gbl...
> Jabez Gan [MVP] wrote:
>> Hey Marcus,
>>
>> In your Windows Server 2008, click Start and type:
>> WF.msc
>>
>> Click Inbound Rules.
>>
>> Under File and Printer Sharing *, make sure that it is set to Enable
>> under Domain Profile. You'll see a few File and Printer Sharing and
>> enable all which is under Domain Profile.
>>
>
>
I am realy confused now. You writing about LDAP but it is not whole
domain security problem because we can share files from all other
machines running windows 2003, Xp etc.
Do I need download GPMC.MSC like we done in Windows 2003?
Can the problem be caused that I am running Hyper-V on that machine?
Why microsoft done everything so complicated. I thing that if I want to
share file its mean that Windows should open firewall automatically. It
is not in my case.
I will try more tonight, I closed myself now by reseting Firewall rule,
and I can not access my server from home by remote desktop.
But maybe there is the way to remote open firewall for remote desktop.
MarcusB
Jabez Gan [MVP] wrote:
> Hey Marcus,
>
> Please try the following:
>
> 1. Open GPMC.MSc
> 2. Navigate to Default Domain Policy (Or create a new poliicy)
> 3. Under the Action, select Edit.
> 4. Group Policy Editor will open. Navigate to Windows Firewall with
> Advanced Security - LDAP://<DN>
> 5. Click Inbound Rules
> 6. Create a New Rule which allows the File and Sharing.
>
> Sorry for the earlier confusion - we can't modify a domain profile's
> policies through WF.msc.
>
>
"MarcusB" <bafi@linux.nu> wrote in message
news:OQzDmEHnIHA.1208@TK2MSFTNGP03.phx.gbl...
>I am realy confused now. You writing about LDAP but it is not whole domain
>security problem because we can share files from all other machines running
>windows 2003, Xp etc.
> Do I need download GPMC.MSC like we done in Windows 2003?
>
> Can the problem be caused that I am running Hyper-V on that machine?
> Why microsoft done everything so complicated. I thing that if I want to
> share file its mean that Windows should open firewall automatically. It is
> not in my case.
>
>
> I will try more tonight, I closed myself now by reseting Firewall rule,
> and I can not access my server from home by remote desktop.
> But maybe there is the way to remote open firewall for remote desktop.
>
>
> MarcusB
>
> Jabez Gan [MVP] wrote:
>> Hey Marcus,
>>
>> Please try the following:
>>
>> 1. Open GPMC.MSc
>> 2. Navigate to Default Domain Policy (Or create a new poliicy)
>> 3. Under the Action, select Edit.
>> 4. Group Policy Editor will open. Navigate to Windows Firewall with
>> Advanced Security - LDAP://<DN>
>> 5. Click Inbound Rules
>> 6. Create a New Rule which allows the File and Sharing.
>>
>> Sorry for the earlier confusion - we can't modify a domain profile's
>> policies through WF.msc.
>>
For what it's worth Marcus, I have windows 2008 server running with hyper -
v and I have no problems connecting to a share in the way you mention in
your post. I did not have to do any of the complicated things that have been
mentioned in this thread- just set up file services role, and make sure
appropriate permissions are set on the share- something else must be going
on.
It was like that simple before connecting the server to the domain.
After I connected to the domain firewalls rules stoped access to all
shares on our Windows 2008 server.
I did not use Group Policies at our domain att all before, therefore I
was very surprised that Microsoft complicated everything in Windows 2008.
I just tested now to run GPMC.msc on our domain controller and checked
that rules for firewall was never activated, I changed and enabled this
rules and after forcing policies, share become usable again. Really
shame Microsoft. I spent two days fighting with such small problem.
Thanks you all for help
MarcusB
dan wrote:
> "MarcusB" <bafi@linux.nu> wrote in message
> news:OQzDmEHnIHA.1208@TK2MSFTNGP03.phx.gbl...
>> I am realy confused now. You writing about LDAP but it is not whole domain
>> security problem because we can share files from all other machines running
>> windows 2003, Xp etc.
>> Do I need download GPMC.MSC like we done in Windows 2003?
>>
>> Can the problem be caused that I am running Hyper-V on that machine?
>> Why microsoft done everything so complicated. I thing that if I want to
>> share file its mean that Windows should open firewall automatically. It is
>> not in my case.
>>
>>
>> I will try more tonight, I closed myself now by reseting Firewall rule,
>> and I can not access my server from home by remote desktop.
>> But maybe there is the way to remote open firewall for remote desktop.
>>
>>
>> MarcusB
>>
>> Jabez Gan [MVP] wrote:
>>> Hey Marcus,
>>>
>>> Please try the following:
>>>
>>> 1. Open GPMC.MSc
>>> 2. Navigate to Default Domain Policy (Or create a new poliicy)
>>> 3. Under the Action, select Edit.
>>> 4. Group Policy Editor will open. Navigate to Windows Firewall with
>>> Advanced Security - LDAP://<DN>
>>> 5. Click Inbound Rules
>>> 6. Create a New Rule which allows the File and Sharing.
>>>
>>> Sorry for the earlier confusion - we can't modify a domain profile's
>>> policies through WF.msc.
>>>
>
> For what it's worth Marcus, I have windows 2008 server running with hyper -
> v and I have no problems connecting to a share in the way you mention in
> your post. I did not have to do any of the complicated things that have been
> mentioned in this thread- just set up file services role, and make sure
> appropriate permissions are set on the share- something else must be going
> on.
>
>
"MarcusB" <bafi@linux.nu> wrote in message
news:%23U1gIdKnIHA.1768@TK2MSFTNGP05.phx.gbl...
> It was like that simple before connecting the server to the domain. After
> I connected to the domain firewalls rules stoped access to all shares on
> our Windows 2008 server.
> I did not use Group Policies at our domain att all before, therefore I was
> very surprised that Microsoft complicated everything in Windows 2008.
> I just tested now to run GPMC.msc on our domain controller and checked
> that rules for firewall was never activated, I changed and enabled this
> rules and after forcing policies, share become usable again. Really shame
> Microsoft. I spent two days fighting with such small problem.
>
> Thanks you all for help
> MarcusB
> dan wrote:
>> "MarcusB" <bafi@linux.nu> wrote in message
>> news:OQzDmEHnIHA.1208@TK2MSFTNGP03.phx.gbl...
>>> I am realy confused now. You writing about LDAP but it is not whole
>>> domain security problem because we can share files from all other
>>> machines running windows 2003, Xp etc.
>>> Do I need download GPMC.MSC like we done in Windows 2003?
>>>
>>> Can the problem be caused that I am running Hyper-V on that machine?
>>> Why microsoft done everything so complicated. I thing that if I want to
>>> share file its mean that Windows should open firewall automatically. It
>>> is not in my case.
>>>
>>>
>>> I will try more tonight, I closed myself now by reseting Firewall rule,
>>> and I can not access my server from home by remote desktop.
>>> But maybe there is the way to remote open firewall for remote desktop.
>>>
>>>
>>> MarcusB
>>>
>>> Jabez Gan [MVP] wrote:
>>>> Hey Marcus,
>>>>
>>>> Please try the following:
>>>>
>>>> 1. Open GPMC.MSc
>>>> 2. Navigate to Default Domain Policy (Or create a new poliicy)
>>>> 3. Under the Action, select Edit.
>>>> 4. Group Policy Editor will open. Navigate to Windows Firewall with
>>>> Advanced Security - LDAP://<DN>
>>>> 5. Click Inbound Rules
>>>> 6. Create a New Rule which allows the File and Sharing.
>>>>
>>>> Sorry for the earlier confusion - we can't modify a domain profile's
>>>> policies through WF.msc.
>>>>
>>
>> For what it's worth Marcus, I have windows 2008 server running with
>> hyper - v and I have no problems connecting to a share in the way you
>> mention in your post. I did not have to do any of the complicated things
>> that have been mentioned in this thread- just set up file services role,
>> and make sure appropriate permissions are set on the share- something
>> else must be going on.
Interesting. My windows 2008 server is also joined to a domain, and again, I
did not encounter these issues for some reason. I have not touched firewall
settings or group policy since I set up my 2008 server.
Did you uppdated to Hyper-V RC? I does.
MarcusB
dan wrote:
> "MarcusB" <bafi@linux.nu> wrote in message
> news:%23U1gIdKnIHA.1768@TK2MSFTNGP05.phx.gbl...
>> It was like that simple before connecting the server to the domain. After
>> I connected to the domain firewalls rules stoped access to all shares on
>> our Windows 2008 server.
>> I did not use Group Policies at our domain att all before, therefore I was
>> very surprised that Microsoft complicated everything in Windows 2008.
>> I just tested now to run GPMC.msc on our domain controller and checked
>> that rules for firewall was never activated, I changed and enabled this
>> rules and after forcing policies, share become usable again. Really shame
>> Microsoft. I spent two days fighting with such small problem.
>>
>> Thanks you all for help
>> MarcusB
>> dan wrote:
>>> "MarcusB" <bafi@linux.nu> wrote in message
>>> news:OQzDmEHnIHA.1208@TK2MSFTNGP03.phx.gbl...
>>>> I am realy confused now. You writing about LDAP but it is not whole
>>>> domain security problem because we can share files from all other
>>>> machines running windows 2003, Xp etc.
>>>> Do I need download GPMC.MSC like we done in Windows 2003?
>>>>
>>>> Can the problem be caused that I am running Hyper-V on that machine?
>>>> Why microsoft done everything so complicated. I thing that if I want to
>>>> share file its mean that Windows should open firewall automatically. It
>>>> is not in my case.
>>>>
>>>>
>>>> I will try more tonight, I closed myself now by reseting Firewall rule,
>>>> and I can not access my server from home by remote desktop.
>>>> But maybe there is the way to remote open firewall for remote desktop.
>>>>
>>>>
>>>> MarcusB
>>>>
>>>> Jabez Gan [MVP] wrote:
>>>>> Hey Marcus,
>>>>>
>>>>> Please try the following:
>>>>>
>>>>> 1. Open GPMC.MSc
>>>>> 2. Navigate to Default Domain Policy (Or create a new poliicy)
>>>>> 3. Under the Action, select Edit.
>>>>> 4. Group Policy Editor will open. Navigate to Windows Firewall with
>>>>> Advanced Security - LDAP://<DN>
>>>>> 5. Click Inbound Rules
>>>>> 6. Create a New Rule which allows the File and Sharing.
>>>>>
>>>>> Sorry for the earlier confusion - we can't modify a domain profile's
>>>>> policies through WF.msc.
>>>>>
>>> For what it's worth Marcus, I have windows 2008 server running with
>>> hyper - v and I have no problems connecting to a share in the way you
>>> mention in your post. I did not have to do any of the complicated things
>>> that have been mentioned in this thread- just set up file services role,
>>> and make sure appropriate permissions are set on the share- something
>>> else must be going on.
> Interesting. My windows 2008 server is also joined to a domain, and again, I
> did not encounter these issues for some reason. I have not touched firewall
> settings or group policy since I set up my 2008 server.
>
>
Hi Marcus,
Really sorry that the changes done in W2k8 made things much harder. Guess MS
needs to re-work on this area. Good feedback tho ;)
--
Jabez Gan
Microsoft MVP: Windows Server
http://www.msblog.org
"MarcusB" <bafi@linux.nu> wrote in message
news:%23U1gIdKnIHA.1768@TK2MSFTNGP05.phx.gbl...
> It was like that simple before connecting the server to the domain. After
> I connected to the domain firewalls rules stoped access to all shares on
> our Windows 2008 server.
> I did not use Group Policies at our domain att all before, therefore I was
> very surprised that Microsoft complicated everything in Windows 2008.
> I just tested now to run GPMC.msc on our domain controller and checked
> that rules for firewall was never activated, I changed and enabled this
> rules and after forcing policies, share become usable again. Really shame
> Microsoft. I spent two days fighting with such small problem.
>
> Thanks you all for help
> MarcusB
> dan wrote:
>> "MarcusB" <bafi@linux.nu> wrote in message
>> news:OQzDmEHnIHA.1208@TK2MSFTNGP03.phx.gbl...
>>> I am realy confused now. You writing about LDAP but it is not whole
>>> domain security problem because we can share files from all other
>>> machines running windows 2003, Xp etc.
>>> Do I need download GPMC.MSC like we done in Windows 2003?
>>>
>>> Can the problem be caused that I am running Hyper-V on that machine?
>>> Why microsoft done everything so complicated. I thing that if I want to
>>> share file its mean that Windows should open firewall automatically. It
>>> is not in my case.
>>>
>>>
>>> I will try more tonight, I closed myself now by reseting Firewall rule,
>>> and I can not access my server from home by remote desktop.
>>> But maybe there is the way to remote open firewall for remote desktop.
>>>
>>>
>>> MarcusB
>>>
>>> Jabez Gan [MVP] wrote:
>>>> Hey Marcus,
>>>>
>>>> Please try the following:
>>>>
>>>> 1. Open GPMC.MSc
>>>> 2. Navigate to Default Domain Policy (Or create a new poliicy)
>>>> 3. Under the Action, select Edit.
>>>> 4. Group Policy Editor will open. Navigate to Windows Firewall with
>>>> Advanced Security - LDAP://<DN>
>>>> 5. Click Inbound Rules
>>>> 6. Create a New Rule which allows the File and Sharing.
>>>>
>>>> Sorry for the earlier confusion - we can't modify a domain profile's
>>>> policies through WF.msc.
>>>>
>>
>> For what it's worth Marcus, I have windows 2008 server running with
>> hyper - v and I have no problems connecting to a share in the way you
>> mention in your post. I did not have to do any of the complicated things
>> that have been mentioned in this thread- just set up file services role,
>> and make sure appropriate permissions are set on the share- something
>> else must be going on.
Posting Permissions
Reply With Quote
Bookmarks