Group:  English: General ยป microsoft.public.windows.file_system
Thread: Discrepancy between group membership and Effective Permissions

DotNetBag
.NET Development Newsgroups

HTVi
TV Discussion Newsgroups

Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
Rising Antivirus 2006

Discrepancy between group membership and Effective Permissions
stu_derek 10.07.2007 16:40:02
Hi,

I have an AD environment containing a parent domain and a child domain. I
have created a Local security group in the parent domain (Group A) and nested
in this, a global security group from the child domain (Group B). I have
added a number of users to Group B from the child domain.

However, when I assign Read/Mod rights to Group A to a folder on my file
server, some users do not have access to the folder. If I select the user
from Effective Permissions, they are listed as having NO access to the folder
in question. If I explicitally add them to the folder, their access is ok.

I've scoured the Internet looking for answers but to no avail. I've checked
and double checked the group memberships and nothing should be preventing
access to the folders. Strangely, if I create a new user profile, based on
one of the suspect profiles (ie. one that doesn't have any effective
permissions), then the new user has access to the folders!! - Even though,
the new test 'user' is a member of all the same groups. I would be tempted to
simply recreate all the AD users that seem to be failing, but there are
around 12 that don't have access to folders that they should.

Any body any ideas on what to look at next here?

Many thanks. (Sorry for the long-winded post!)

Home | Search | Terms | Imprint | Contact
Newsgroups Reader - provided by WiredBox.Net