So, I've recently taken over management of a server at my company, which was handled by someone who no longer works here. We're using a NAS drive for our shared folders, and I've noticed that while the Domain Users group has read/write permissions on the root folder, a new member added to this group is getting an 'Access Denied' error when trying to map the network drive. I thought just adding users to the Domain Users group would automatically give them access. Can someone explain the right way to set this up? I want to ensure users can be easily added or removed from Active Directory and have those changes reflected correctly in the folder permissions.
3 Answers
First off, you might want to double-check how the folder is actually shared. It could be limited to specific users unexpectedly. Also, don't forget to look at subfolder permissions—if inheritance isn't working properly there, it could lead to access issues for the new user. You might need to adjust those settings to allow for proper access.
It's important to know that SMB shares have two types of permissions: Share permissions and Filesystem ACLs. Share permissions are mostly for older Windows systems, so to avoid confusion, set your share permissions to 'Authenticated Users Full Control.' Focus on using Filesystem ACLs for managing access, as they're more precise. If Share permissions are set to read-only but ACLs are full control, users will only get read-only access when accessing via the share.
Don't forget that for users to see the changes after they're added to a group, they have to log out and then back in. Also, some NAS devices require you to run a sync with Active Directory for the group memberships to update properly. This might solve your issue!
I checked, and it says shared access is set to everyone! Plus, I made sure that when adding individual users, the subfolder and files option is selected.