☰

系统帐户无法访问共享文件夹

tag-icon • tag-icon windows-server-2008 security windows-7
系统帐户无法访问共享文件夹

我遇到了网络机器的不同行为问题。小日志：

C:\Windows\system32>whoami
nt authority\system

C:\Windows\system32>net view
Server Name            Remark
------------------------------------------
\\02210585DS001
\\02210585SS001
\\02210585SS002
\\02210585WS001
The command completed successfully.


C:\Windows\system32>net view 02210585SS001
Shared resources at 02210585SS001

Share name  Type  Used as  Comment
------------------------------------------
APPLDRV     Disk  (UNC)
BKUPDRV     Disk
DATADRV     Disk
SYSTDRV     Disk
The command completed successfully.


C:\Windows\system32>net view 02210585WS001
System error 5 has occurred.

Access is denied.

你能告诉我应该在哪里查找原因吗？我找不到这台机器的配置有任何差异。

添加：抱歉回复太长。共享和 NTFS ACL：

正常运行的系统：

C:\>icacls c:
c: BUILTIN\Administrators:(F)
   BUILTIN\Administrators:(OI)(CI)(IO)(F)
   NT AUTHORITY\SYSTEM:(F)
   NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
   BUILTIN\Users:(OI)(CI)(RX)
   NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
   NT AUTHORITY\Authenticated Users:(AD)
   Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

Successfully processed 1 files; Failed processing 0 files


C:\>rmtshare \\02210585SS001\DATADRV
Share name        \\02210585SS001\DATADRV
Path              C:\
Remark
Maximum users     No limit
Users             1
Permissions:
        \Everyone  :  FULL CONTROL
 BUILTIN\Users     :  CHANGE
 BUILTIN\Administrators:  CHANGE
The command completed successfully.

不起作用的系统：

C:\>icacls c:
c: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
   BUILTIN\Administrators:(OI)(CI)(F)
   BUILTIN\Users:(OI)(CI)(RX)
   NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
   NT AUTHORITY\Authenticated Users:(S,AD)
   Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)

Successfully processed 1 files; Failed processing 0 files


C:\>rmtshare \\02210585WS001\DATADRV
Share name        \\02210585WS001\DATADRV
Path              C:\
Remark
Maximum users     No limit
Users             0
Permissions:
        \Everyone  :  FULL CONTROL
 BUILTIN\Administrators:  CHANGE
 BUILTIN\Users     :  CHANGE
The command completed successfully.

答案1

您以 NT AUTHORITY\System 身份登录，这意味着您在网络上显示为计算机帐户（根据这个问题）。

我的猜测是，您的计算机帐户是 SS001 上的某个本地组的成员，但不是 WS001 上的本地组的成员？

答案2

抱歉打扰了...Windows 启动脚本中有一个命令，使用 02210585SS001 共享文件夹。所以这就是原因。

相关内容