Re: File sharing in Windows 2008
"MarcusB" <bafi@linux.nu> wrote in message
news:%23U1gIdKnIHA.1768@TK2MSFTNGP05.phx.gbl...
> It was like that simple before connecting the server to the domain. After
> I connected to the domain firewalls rules stoped access to all shares on
> our Windows 2008 server.
> I did not use Group Policies at our domain att all before, therefore I was
> very surprised that Microsoft complicated everything in Windows 2008.
> I just tested now to run GPMC.msc on our domain controller and checked
> that rules for firewall was never activated, I changed and enabled this
> rules and after forcing policies, share become usable again. Really shame
> Microsoft. I spent two days fighting with such small problem.
>
> Thanks you all for help
> MarcusB
> dan wrote:
>> "MarcusB" <bafi@linux.nu> wrote in message
>> news:OQzDmEHnIHA.1208@TK2MSFTNGP03.phx.gbl...
>>> I am realy confused now. You writing about LDAP but it is not whole
>>> domain security problem because we can share files from all other
>>> machines running windows 2003, Xp etc.
>>> Do I need download GPMC.MSC like we done in Windows 2003?
>>>
>>> Can the problem be caused that I am running Hyper-V on that machine?
>>> Why microsoft done everything so complicated. I thing that if I want to
>>> share file its mean that Windows should open firewall automatically. It
>>> is not in my case.
>>>
>>>
>>> I will try more tonight, I closed myself now by reseting Firewall rule,
>>> and I can not access my server from home by remote desktop.
>>> But maybe there is the way to remote open firewall for remote desktop.
>>>
>>>
>>> MarcusB
>>>
>>> Jabez Gan [MVP] wrote:
>>>> Hey Marcus,
>>>>
>>>> Please try the following:
>>>>
>>>> 1. Open GPMC.MSc
>>>> 2. Navigate to Default Domain Policy (Or create a new poliicy)
>>>> 3. Under the Action, select Edit.
>>>> 4. Group Policy Editor will open. Navigate to Windows Firewall with
>>>> Advanced Security - LDAP://<DN>
>>>> 5. Click Inbound Rules
>>>> 6. Create a New Rule which allows the File and Sharing.
>>>>
>>>> Sorry for the earlier confusion - we can't modify a domain profile's
>>>> policies through WF.msc.
>>>>
>>
>> For what it's worth Marcus, I have windows 2008 server running with
>> hyper - v and I have no problems connecting to a share in the way you
>> mention in your post. I did not have to do any of the complicated things
>> that have been mentioned in this thread- just set up file services role,
>> and make sure appropriate permissions are set on the share- something
>> else must be going on.
Interesting. My windows 2008 server is also joined to a domain, and again, I
did not encounter these issues for some reason. I have not touched firewall
settings or group policy since I set up my 2008 server.