Give access to network drive active Directory

When you first create a file share on your network, all users are granted read-only access to the share. If you want to allow users to modify files in the share or allow them to create new files, you need to add permissions. Here’s how to do this using Windows Explorer:
  1. Open Windows Explorer by pressing the Windows key and clicking Computer; then browse to the folder whose permissions you want to manage.

  2. Right-click the folder you want to manage and then choose Properties from the contextual menu.

    The Properties dialog box for the folder appears.

  3. Click the Sharing tab; then click Advanced Sharing.

    The Advanced Sharing dialog box appears.

  4. Click Permissions.

    The dialog box shown appears. This dialog box lists all the users and groups to whom you’ve granted permission for the folder. Initially, read permissions are granted to a group called Everyone, which means that anyone can view files in the share but no one can create, modify, or delete files in the share.

    When you select a user or group from the list, the check boxes at the bottom of the list change to indicate which specific permissions you’ve assigned to each user or group.

    Give access to network drive active Directory

  5. Click the Add button.

    The dialog box shown appears.

    Give access to network drive active Directory

  6. Enter the name of the user or group to whom you want to grant permission and then click OK.

    If you’re not sure of the name, click the Advanced button. This action brings up a dialog box from which you can search for existing users.

    When you click OK, you return to the Share Permissions tab, with the new user or group added.

  7. Select the appropriate Allow and Deny check boxes to specify which permissions to allow for the user or group.

  8. Repeat Steps 5–7 for any other permissions that you want to add.

  9. When you’re done, click OK.

Here are a few other thoughts to ponder concerning adding permissions:
  • If you want to grant full access to everyone for this folder, don’t bother adding another permission. Instead, select the Everyone group and then select the Allow check box for each permission type.

  • You can remove a permission by selecting the permission and then clicking the Remove button.

  • If you’d rather not fuss with the Share and Storage Management console, you can set the permissions from My Computer. Right-click the shared folder, choose Sharing and Security from the contextual menu, and then click Permissions. Then you can follow the preceding procedure, picking up at Step 5.

  • The permissions assigned in this procedure apply only to the share itself. The underlying folder can also have permissions assigned to it. If that’s the case, whichever of the restrictions is most restrictive always applies. If the share permissions grant a user Full Control permission but the folder permission grants the user only Read permission, for example, the user has only Read permission for the folder.

About This Article

This article is from the book:

  • Networking For Dummies ,

About the book author:

Doug Lowe is the bestselling author of Networking For Dummies and Networking All-in-One Desk Reference For Dummies. His 50+ books include more than 30 in the For Dummies series. He has demystified everything from Microsoft Office and memory management to client/server computing and creating web pages.

This article can be found in the category:

  • General Networking ,

  • Home
  • Anonymous
  • Sign in to post
  • Post
  • Explore
  • Tags
  • Questions
  • Site feedback
  • Articles
  • Users

Skip to main content

Give access to network drive active Directory

    • Tags
    • Questions
    • Site feedback
    • Articles
    • Users
  • Sign in to post

  • Home

question

Hello.

I've this situation:
- A WIN10 acting as server. It's in a domain.
- There are shared folders here, one public and another accesible by a domain group.
- I wan't to change this to only one folder accesible by a simple local user auth, not in domain. Like "myuser" "mypassword-1231231" or whatever.

How I can do it?
If I create a local user and configure in the folder, when I try to access, I get only an error. I wan't to get the "typical" prompt asking for user/password, despite PC is in domain.

I read that changing an option in advanced network options (unable the auto-login) will work, but I haven't this option (because the system is on a domain, I guess).

Many many thanks!!

windows-10-network

Hi there,

When using a local account to access a domain network share, you will be prompted to enter the user credential for the domain. Please note that all servers in a domain must be passed domain credentials. If the credentials passed are in a different context, then the file servers (member servers) of the domain will attempt to check their local user accounts only. If the credentials do not match, then the user is prompted for valid credentials (or access is not permitted).

In your situation, the users are logging locally on the clients. This creates a user session in the LOCALMACHINE\USERNAME context. Because the user is not in the domain context, DOMAIN\USERNAME, any attempts to connect to domain resources will require either a server local account that matches the local machine credentials or a prompt for a new username/password.

It is recommended to use domain users to access the domain resources. Meanwhile, if you insist, as a workaround, local accounts on each member server where the shared folders are stored will have to be created to directly map to the same username/password combinations the users are using on each local machine


--If the reply is helpful, please Upvote and Accept it as an answer--

Hi!
Thanks for your answer.
I shared folder (a new resource) with the local machine user, but in my pc (logged with my domain/user domain) when I try to access, only an error "Windows can't obtain access..." and never the typical "request user" prompt.

Even if I try to do with "Connect to network drive" where I could force an user, I also have an error (despite I'm forcing the machine\myuser login).

There are any way to do it?
Thanks!!!

MotoX80 answered Dec 2, '21

There are share permissions and there are file+folder permissions. The share permissions act as a filter to the file+folder permissions. So if the file+folder permissions show "everyone:full", but the share permissions only have "everyone:read", then when any user accesses the files via the share they will only be able to read (not update) the files.

When I share a folder I always use the "Advanced Sharing" button. I never use the "Share" button because it disables permission inheritance on that folder. I prefer to manage folder permissions myself.

Give access to network drive active Directory

So start by analyzing the share permissions.

Give access to network drive active Directory

Your local account will be able to access the share (typically) via it's name, or "everyone" or "authenticated users". If you only have Domain Users, that won't work.

What do you have listed in the share permissions? What is listed in the file/folder permissions?


Hi!
Thanks for answer.

Testing now I have only the local user created (nothing about domain users). Neither users allowed.

Give access to network drive active Directory

But in my personal PC (logged with a domain user) I just got an error, not the user/password prompt.

Give access to network drive active Directory

Even if I try to do as network resource, where I can force user:

Give access to network drive active Directory

Give access to network drive active Directory

Give access to network drive active Directory

I don't know how to do it :(

What I want is by default Windows asking for user/password when you try to enter like in the 4th (grey) image.



question details