I have a single windows 2003 server that is a domain controller. I have several shares setup on the server. I would assume that the users in the domain admin group should be able to access these shares (map to their profile) without having rights explicitly granted to them in share permissions. This does not seem to be the case. I can only map these shares to the domain admins if I explicitly grant that permission to the group. Is this expected behaviour? Anybody have any ideas on why this is happening?