Hello.

I've been working on a way to password protect folders, even after the
domain logon, with the RUNAS command.

What I've done so far:

- Created a new user called "permission_folder1"
- Created a new folder called "folder1", removed all permissions from it,
and added the new user in the permission list.
- Created a shortcut, and added the runas command:
runas /user:domain\permission_folder1 "explorer.exe
\\server1\sharename\folder1"

When I try to open the shortcut, it will ask for password (for the
permission_folder1 user). If I type wrong password nothing happends, if I
type the right password it gives me a weird error, which I could find nothing
about on google:

RUNAS ERROR: Unable to run - explorer.exe \\server1\sharename\folder1
1385: Logon failure: the user has not been granted the requested logon type
at this computer


What does this mean? What can I do to fix it, if it's even possible?

It all takes place in a Windows enviroment, with a Windows 2003 Small
Business Server as DC, Windows Server 2003 as terminal server and Windows XP
as clients.
The shortcut doesn't work on the terminal server, nor the Windows XP clients.
The secondary logon service is running.

Might be worth mentioning that I can use:
runas /user:domain\permission_folder1 calc



Note: All names like server1, sharename, folder1, permission_folder1 etc.
are dummynames.

"banan2" <banan2@discussions.microsoft.com> wrote in message
news:0D57DCDA-BBC2-46BC-A147-5CFC55F2948A@microsoft.com...
> Hello.
>
> I've been working on a way to password protect folders, even after the
> domain logon, with the RUNAS command.
>
> What I've done so far:
>
> - Created a new user called "permission_folder1"
> - Created a new folder called "folder1", removed all permissions from it,
> and added the new user in the permission list.
> - Created a shortcut, and added the runas command:
> runas /user:domain\permission_folder1 "explorer.exe
> \\server1\sharename\folder1"
>
> When I try to open the shortcut, it will ask for password (for the
> permission_folder1 user). If I type wrong password nothing happends, if I
> type the right password it gives me a weird error, which I could find
> nothing
> about on google:
>
> RUNAS ERROR: Unable to run - explorer.exe \\server1\sharename\folder1
> 1385: Logon failure: the user has not been granted the requested logon
> type
> at this computer
>
>
> What does this mean? What can I do to fix it, if it's even possible?
>
> It all takes place in a Windows enviroment, with a Windows 2003 Small
> Business Server as DC, Windows Server 2003 as terminal server and Windows
> XP
> as clients.
> The shortcut doesn't work on the terminal server, nor the Windows XP
> clients.
> The secondary logon service is running.
>
> Might be worth mentioning that I can use:
> runas /user:domain\permission_folder1 calc
>
>
>
> Note: All names like server1, sharename, folder1, permission_folder1 etc.
> are dummynames.

AFAIR, you cannot run Explorer under alternative credentials -
perhaps because it is tightly integrated with Windows. Why do
you actually want to use runas.exe?

I want to use runas because I want it to ask for password even after I've
logged in.

So how can I open a folder as an other user then? >.<

"banan2" <banan2@discussions.microsoft.com> wrote in message
news:63A546FF-2933-43BD-94C9-A80EB8F0A9B5@microsoft.com...
>I want to use runas because I want it to ask for password even after I've
> logged in.
>
> So how can I open a folder as an other user then? >.<

I don't think you can do this with native Windows tools.
I suggest you look on the web for tools that let you encrypt
individual folders, or apply passwords to individual folders.
Before you apply them, make sure there is a backdoor.
People frequently post here when unable to decrypt encrypted
files. You also need to make sure that these files can get
backed up.

I have been looking for a thirt party tool that allows me to do what I want,
but this is on a network enviroment, and people on many clients are going to
use it. I have yet to find a thirt party tool that can password protect
folders on the network, only local folders.

Is there any other "explorer" around that only browse folders?

Hi, Did you find any way of password protecting network folders?
I have been looking at this also as our MD wants to password protect some shared folders on our domain so that even an administrator cant access them without a password. NTFS permissions are void in this instance as an admin can simply give themselves permission to access any folders.
What is RUNAS and will it work for me in this instance?
Any ideas would be much appreicated!
Thanks

You could advise your MD to use winzip and use the password facility in
that.

<Jamie Lewis> wrote in message news:2008620104425jamie@zyro.co.uk...
> Hi, Did you find any way of password protecting network folders?
> I have been looking at this also as our MD wants to password protect some
> shared folders on our domain so that even an administrator cant access
> them without a password. NTFS permissions are void in this instance as an
> admin can simply give themselves permission to access any folders.
> What is RUNAS and will it work for me in this instance?
> Any ideas would be much appreicated!
> Thanks