Simple Active Directory Directory Sharing Problem

[Matthew Frederick]

This has got to be simple, but I've yet to figure it out and have had
the problem for a couple of years (including after a recent complete
reinstallation of the OS and recreation of the AD and everything).

One DC, sharing directories on that same machine. I created groups
(like "Front Desk" and "Administration" and such) and put users in the
groups (security, local domain or global). I share directories,
removing access for Everyone and adding access for certain groups,
giving them full control (via the Security tab).

For whatever reason, though, members of those groups aren't allowed
access to the directories. I have to add Authenticated Users or
Everyone to the permissions to allow anyone to have access, at which
point, of course, everyone has access.

What am I missing?

 

[Herb Martin]

This has got to be simple, but I've yet to figure it out and have had
the problem for a couple of years (including after a recent complete
reinstallation of the OS and recreation of the AD and everything).

One DC, sharing directories on that same machine. I created groups
(like "Front Desk" and "Administration" and such) and put users in the
groups (security, local domain or global). I share directories,
removing access for Everyone and adding access for certain groups,
giving them full control (via the Security tab).

For whatever reason, though, members of those groups aren't allowed
access to the directories. I have to add Authenticated Users or
Everyone to the permissions to allow anyone to have access, at which
point, of course, everyone has access.

What am I missing?

One of two things, either:

1) Permissions on the actual NTFS files and directories (not JUST the
sharepoint -- both sets of permission are required -- for these
folks)

2) The users are failing to authenticate

Prove the second isn't happening by explicitly authenticating as one of
these
users:

net use * \\server\share * /userOMAINN\USERName

For #1 just check the file permissions using Explorer or CACLS.exe on the
server side.