User Groups in Active Directory and Shared Folders

October 25, 2012 at 07:00:24
Specs: Windows Server 2003/Windows XP
I have created a user group and added members to the group. I have then created a shared folder, went into permissions on the shared tab, removed everyone (as I only want the group I created to be able to get into this folder) and added the group I want to have access with full control. Then went to the security tab, and added the group I want to have access with full control.

But when I log into a computer with a user in the group, and try to go to the shared folder it tells me it does not have access. What do I need to do for this to work, without having to always individually add every user to every shared folder?


See More: User Groups in Active Directory and Shared Folders

Report •

#1
October 25, 2012 at 07:45:54
Is it a Security Group (not a Distribution Group) and does it have Domain Local scope? If so what you did should work.

Report •

#2
October 25, 2012 at 07:51:15
It is marked as Global (Group Scope) and Security (Group Type).

So I would need to recreate it to change the group scope to domain local instead of global?


Report •

#3
October 25, 2012 at 07:55:50
No, Global should do it. (I really meant not plain Local Scope.) If you have more than one DC it may take a few minutes for the permission change to propogate, and you might want to try rebooting the client computer. If neither of those fix it then somehow you haven't done quite what you say you have.

Report •

Related Solutions

#4
October 25, 2012 at 08:56:54
Ok here is what I have done.

1st - Created User Group CS_Managers (Global - Security)
2nd - Placed my user account as a member of CS_Managers
3rd - Went to my file server (Different server then DC Server) and created a folder named Test
4th - Went into the properties of the folder and then to Sharing clicked Share this folder.
5th - Clicked Permissions and removed Everyone and added the group CS_Managers. Choose Full Control. Clicked Apply, then Ok.
6th - Then went to Security. Added group CS_Managers and Choose Full Control. Clicked Apply, then Ok.
7th - Clicked Apply and Ok.

But when I go to that share on my PC, I get Windows cannot access \\server\test

You do no have permission to access \\server\test


Report •

#5
October 25, 2012 at 09:09:29
1. I take it the other server is joined to the domain.

2. Did you just type in the Group name or did you select it from a list?

3. Is your PC joined to the domain?

4. Are you logging on with the domain account, not a local one?

5. Have you rebooted your PC, or at least logged off and on again?

6. Have you looked at the Security Log on the server?


Report •

#6
November 1, 2012 at 04:50:59
Please do the assigning at this way. I hope from this steps you wont get any error to add each user individually.

Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
In the console tree, click Users.
In the Details pane, right-click the user account, and then click Properties.
In the Properties dialog box, click Profile.

and then assign the user again and then same process with the security settings and then add groups to them.


Report •

Ask Question