Sharing violation

Dear all

I have a very strange problem and I sincerely hope you can help me out here.

Recently I upgraded my windows 2000 server with an additional 1GB RAM. This upgrade had to be a relief to the server but it seems to have caused a very strange problem to occur. When the business day started users were complaining that they couldnt save changes they make on their network folder particularly excel files (.XLS). They couldnt save changes, delete, rename or do anything... only read the file! Funny thing is that problem did not affect anyone and it seems to have been affecting more and more users gradually not all at once. Also it is to be noted that the users have full permissions on these files....
and also trying to delete the files from the server side using the Administrator account does not work either!!!

Then it came to mind to update the server with all updates and also to
update all client office xp to SP3. And it worked....but only for a few
days...problem surfaced. Cant delete, modify or do anything it keeps saying that there is a sharing violation and file is in use (not true as file is only opened by a single user).

Can anyone help me out here? I would be very grateful!

 

Have you also checked the share permissions. Users need both file and share permissions to be correct. It could be there is a conflict there.

 

How much RAM does your server has right now ?

The problem started only after you upgraded the RAM [right ?]. Check your hardware specs for the model of RAM, speed etc. and also the max. it can support.

 

Server had 1GB RAM and then I upgraded it to 2GB but I dont suspect the RAM caused the problem....

Server had some updates ready and waited for the restart...

I think some updates ***** the thing up. I dont have more updates left to apply...

 

Logical sequence would be to uninstall the updates one by one & see when the problem disappears. Practical solution would be to uninstall ALL the patches installed on that particular day.

 

Here's an update to my problem. I checked the NTFS permissions of those users having problems, and found that in the DACL of the folder in which the files reside there was a user SID which seemed to be corrupted as instead of the username an icon with a face and a question mark appeared and name is in the form of HEX...

After removing this unknown user from the DACL and rebooted server problem seemed to have been solved as I could delete, modify etc but I am not sure about it...

Has anyone encountered this before?

 

This is the DACL with the corrupted user...


http://img111.imageshack.us/img111/7553/44023017yw7.jpg


any ideas??

 

That looks like what you get if you change domains. That is, credentials for a user that is neither local to the PC nor of the current domain, but instead belonged to a domain that is no longer accessible.

 

i see...

does this have something to do with a process called NTFRS something for replication? cos once I noticed that this process was eating my CPU like a tazmanian devil !

 

can anyone suggest anything? i am having this problem :S