Solved

Access denied to share when Security Group has full control.

Posted on 2009-07-13
2
826 Views
Last Modified: 2013-12-04
I have recently created new shares.  One on a SBS 2003 server others on a new 2003 R2 member server.  These shares needed to be restricted so only limited staff can access.  I created a global security group, and added the users to the group and gave the group full control of the share.  NTFS permissions are default.

When the users try to access the share, they got Access Denied.  I first went into the advanced properties and checked the effective permissions for the users.  It showed up with the designated users having full control.  I individually added each user with full control at the share and they are now able to get access.  If I go back and remove the user, they are again denied access.

I have always been taught to give groups permission not users, but I am unable to do that with this problem.
0
Comment
Question by:remmett70
2 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 250 total points
ID: 24846440
Did the users logoff and back on after you've joined them to the group? The security token with a user's group membership only gets updated during logon.
0
 
LVL 10

Author Comment

by:remmett70
ID: 24850380
Well it looks like I need to slap the hands of my users.  They are suppose to log off and shut down nightly and apparently are not since the groups were not updating for them.  Luckily we had a new generator put in and had to power the entire building down which pretty much forced them to log off.

I can now remove the individual accounts on the shares and they still get access through the groups.  Thanks for the help.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question