Access denied to share when Security Group has full control.

I have recently created new shares.  One on a SBS 2003 server others on a new 2003 R2 member server.  These shares needed to be restricted so only limited staff can access.  I created a global security group, and added the users to the group and gave the group full control of the share.  NTFS permissions are default.

When the users try to access the share, they got Access Denied.  I first went into the advanced properties and checked the effective permissions for the users.  It showed up with the designated users having full control.  I individually added each user with full control at the share and they are now able to get access.  If I go back and remove the user, they are again denied access.

I have always been taught to give groups permission not users, but I am unable to do that with this problem.
LVL 10
remmett70Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

oBdACommented:
Did the users logoff and back on after you've joined them to the group? The security token with a user's group membership only gets updated during logon.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
remmett70Author Commented:
Well it looks like I need to slap the hands of my users.  They are suppose to log off and shut down nightly and apparently are not since the groups were not updating for them.  Luckily we had a new generator put in and had to power the entire building down which pretty much forced them to log off.

I can now remove the individual accounts on the shares and they still get access through the groups.  Thanks for the help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.