We have a win2k8 cluster server. We create a share folder from the failover cluster manager. We then open up windows explorer and open up the properties of the folder. Go to share>advance sharing, grant authenticated users(F), system(F), domain admin(f). Under security, we only leave system(F), server\adminisrator(F), server\users(R, this folder only), group1(F).
We add a test user to group1, login to a workstation as this test user. I am able to map the share but not able to write.