I am using Windows Server 2003 Sp2 and want to use the A G DL P strategy for assigning permissions to resources, currently we only have a list of users and the previous sys admin guy just used those to assign permissions. My problem is that if I nest a Global group inside a DL group I cannot get access to a shared folder BUT if I only use the Global group then access is fine. This does not appear to be a problem with DL groups since if I nest a global group inside another global group and assign that group permissions I still cannot access shared folders. I have to use single groups! I have the Domain Functional Level set to 2003 so I have no idea what is going on, any help would be appreciated

What are the permissions on the shares? Life's more painless for the brainless.

Do you mean the NTFS permissions of the share permissions? I am giving the group full control of the share. The strange thing is the problem only manifests itself if I use nested groups. If I give a single group with users as members the share is OK but if I nest the group inside another and give thet group access I get the access denied error (ie users a & b are in group G Admin, I then creat a group DL Admin and give DL Admin access to a share, I get access denied but if I give the group G Admin access it is fine!) On NTFS the Everyone group has Full control, Users have Read and Execute, Administrators have Full Control, System has Special and Creator Owner has full control. I don't think NTFS is the issue, it seems my servers have an issue with nested groups no matter what their scope!

Don't ask me what the feck has happened overnight but it has suddenly started working! Surely it didn't take nearly 2 days for the functional level change to take effect!? Anyway, just another little ray of sun that make this job so challenging!!!!