Strange NTFS permission issue

Hi, I have a strange permission issue in windows 2003 network. Please correct where I made mistake, if any.

- Windows 2003 domain.
- On a windows 2000 server, I have a shared folder
- On the same folder the groupA has R&E/List folder/Read permission.
- I have a user who is member of this group cannot access or list the folder content: the message is "Acced denied"
- If I add this user individually with same permission level (R&E/List folder/Read) the user can access the folder!

Why this happens?
LVL 5
BasheerptAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

bluntTonyHead of ICTCommented:
Have you given the group both the required share permissions as well as the NTFS permissions? i.e. 'Read' share permissions and the NTFS permissions you mentioned above. You need to grant both to allow access.
Is the user a direct member of the group, or is he/she a member through group nesting?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cirlareCommented:
to me it feels like you have a deny in the group somewhere. deny permission take priority to allow. if you have allow and deny mixed in together deny will win.

the way to do shared folder is to set share permission to full allowing all authenicated users and do the fine tuning on ntfs permission.
0
astralcomputingCommented:
Achems Razor. There is a setting somewhere that is improper on that user. Overlapping GP, wrong group, deny setting. Double check all the basics before you drive yourself insane.
0
BasheerptAuthor Commented:
Dears,
Sorry for delayed response, This problem was occured after i migrated our DC from 2000 to 2003. The problem was the above mentioned group was domain local group. Previously, this shared folder which i want to give the permission was on the old DC. Domain local group worked well that time. Now the shared folder changed to other machine, the Domain local group members could not access.

So, what i did is, deleted old group and recreated it with Domain global group. And ofcourse, asked the users to relogin.

That did work..

Thanks a lot for all of your support
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.