I'm on a server running Windows Server 2003 SP2, with SQL Server 2005 and

Citrix installed. We have an application that is hosted on a file server

that I need to run on the server. When I try to run it as anyone but an

administrator, I'm getting:

"Windows cannot access the specified device, path, or file. You may not

have the appropriate permissions to access the item."

 

Except I do have permission. I have 15 workstations that run programs from

this server every day. I checked the effective permissions in the security

tab and they tell me I have Read & execute permission. (I have "Everyone"

set to full control for the entire share.) I can read files on the share,

but cannot execute. (If I open up a command shell, I can run the program

from the DOS prompt. Presumably this bypasses some aspect of Windows

Security?) If I copy the program to a local hard drive, I can run it. If I

copy the program to a different share, I cannot.

 

Clearly something is preventing me from executing programs on mapped drives.

I just can't for the life of me figure out what it could be.

 

I've turned off Data Execution Prevention and rebooted. I made sure

"unrestricted" is the default in the local software restriction security

policy, and just for good measure I added the path to the executables on the

mapped drive. No luck. I checked my group policies and can't see anything

that would have this effect.

 

Can anyone suggest other settings to check that might be preventing users on

this server?

 

Thanks,

Lee Silverman

lsilverman@yahoo.com

hi,

uninstall windows component Internet Explorer Enhaced Security Configuration

or set the adress of server where mapped drive reside on Trusted Sites, or

put on the hosts file that server.

--

Dragos CAMARA

MCSA Windows 2003 server

 

 

"lsilverman" wrote:

> I'm on a server running Windows Server 2003 SP2, with SQL Server 2005 and

> Citrix installed. We have an application that is hosted on a file server

> that I need to run on the server. When I try to run it as anyone but an

> administrator, I'm getting:

> "Windows cannot access the specified device, path, or file. You may not

> have the appropriate permissions to access the item."

>

> Except I do have permission. I have 15 workstations that run programs from

> this server every day. I checked the effective permissions in the security

> tab and they tell me I have Read & execute permission. (I have "Everyone"

> set to full control for the entire share.) I can read files on the share,

> but cannot execute. (If I open up a command shell, I can run the program

> from the DOS prompt. Presumably this bypasses some aspect of Windows

> Security?) If I copy the program to a local hard drive, I can run it. If I

> copy the program to a different share, I cannot.

>

> Clearly something is preventing me from executing programs on mapped drives.

> I just can't for the life of me figure out what it could be.

>

> I've turned off Data Execution Prevention and rebooted. I made sure

> "unrestricted" is the default in the local software restriction security

> policy, and just for good measure I added the path to the executables on the

> mapped drive. No luck. I checked my group policies and can't see anything

> that would have this effect.

>

> Can anyone suggest other settings to check that might be preventing users on

> this server?

>

> Thanks,

> Lee Silverman

> lsilverman@yahoo.com