Solved

New security group member is unable to access network share

Posted on 2010-11-09
7
328 Views
Last Modified: 2012-05-10
Hi All

I have been trying to grant access to a couple of users and have been having a few problems.

I have made them a member of the relevant security group which is in turn, in the Access Control List and has the relvant level of access but they are unable to open the particular network share they needed.

If I add the user directly to the Access Control List and assign permissions then the drive can be accessed as expected.

This is a Server 2003 environment with XP Clients.

Does anyone have any thoughts on why this may be the case?

If any extra information is needed then just let me know.

Thanks in advance.
0
Comment
Question by:JCHardie
7 Comments
 
LVL 4

Accepted Solution

by:
Antyrael earned 500 total points
ID: 34091874
Probably a silly question, but have these users relogged on Windows?
New group membership will only be active after logging out and back in again.
0
 
LVL 23

Expert Comment

by:jakethecatuk
ID: 34091879
Stating the obvious, you have got the users to logout and login again as the list of groups they are a member of is only updated at login when it comes to share access.
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 34091880
You did add the correct permissions on the share tab AND the security tab? (share folder->rightclick->properties)
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 24

Expert Comment

by:Awinish
ID: 34092041
You can use accessenum & shareenum tool to check the exact permission is floating on the folder.

http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

http://www.softpedia.com/get/Security/Security-Related/ShareEnum.shtml
0
 
LVL 3

Expert Comment

by:danora
ID: 34092089
Hi,

There are a couple of things to try, gpupdate/force on the end users machine to push the changes through, also you could have a look at the effective permissions to see if the user does have access.

Have you allowed users through on the share permissions as well as NTFS?
0
 

Author Comment

by:JCHardie
ID: 34092163
Thanks for your answers.  

Well the first question I ask and I succeed in embarrassing myself!

I didn't get the user to log out.  I didn't realise that adding groups required this but users did not, every day's a school day eh?

Having logged the user out and back in she can now access the drive.  

Thanks again.
0
 
LVL 23

Expert Comment

by:jakethecatuk
ID: 34092172
we've all been there :)
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question