LKBEN10623: Network access of executables forbidden - access denied in spite of sufficient rights


Symptom

Even as domain admin start of executables not allowed - although share and NTFS right are sufficient

Cause

Internet Explorer 7 (IE7) in "enhanced security mode"

Solution

Problem:

Installed "out of the box" Systems with IE7 on client (no matter if w2k3 server or client). Not possible to start executable file (.exe) on mapped network share, no matter of access rights (even as domain administrator with full access on executable file and full access for everybody on network share).

Error Message:
"Windows cannot access the specified device, path, or file.  You may not have appropriate permissions to access the file."

No matter what rights are applied to the network share mapped or NTFS rights applied to the needed file, you're not able to get more than above error message, no matter what user is used (even as domain admin).
This behavior is by design, when Internet Explorer 7 is installed on the client machine.

Two Solutions:

  1. Start Control Panel --> Software --> Add / Remove Windows Components
    Select "Enhanced Securityconfiguration for Internet Explorer" --> "Details..."
    Select / Deselect appropriate Usergroup
  2. Open IE7 --> extras --> Internet Options --> Security
    Set Zone "local Intranet" on low --> click on "Sites"
    select "advanced" and 
    make sure checkmark for https: at bottom is removed,
    add file://Server-Name to "websites"

Alternative: never install IE7 ;-)

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!

About the Author

Author: Wim Peeters - Keskon GmbH & Co. KG

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.