Solved

Access denied to share when Security Group has full control.

Posted on 2009-07-13
2
823 Views
Last Modified: 2013-12-04
I have recently created new shares.  One on a SBS 2003 server others on a new 2003 R2 member server.  These shares needed to be restricted so only limited staff can access.  I created a global security group, and added the users to the group and gave the group full control of the share.  NTFS permissions are default.

When the users try to access the share, they got Access Denied.  I first went into the advanced properties and checked the effective permissions for the users.  It showed up with the designated users having full control.  I individually added each user with full control at the share and they are now able to get access.  If I go back and remove the user, they are again denied access.

I have always been taught to give groups permission not users, but I am unable to do that with this problem.
0
Comment
Question by:remmett70
2 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 250 total points
ID: 24846440
Did the users logoff and back on after you've joined them to the group? The security token with a user's group membership only gets updated during logon.
0
 
LVL 10

Author Comment

by:remmett70
ID: 24850380
Well it looks like I need to slap the hands of my users.  They are suppose to log off and shut down nightly and apparently are not since the groups were not updating for them.  Luckily we had a new generator put in and had to power the entire building down which pretty much forced them to log off.

I can now remove the individual accounts on the shares and they still get access through the groups.  Thanks for the help.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now