Hi,
I’ve got DFSR and NS between two 2003 R2 servers.
I’ve setup a DFS namespace called \\domain.net\data-it
Under this I’ve setup a DFS folder called request
This folder has two targets, one on each DFS server (say data1 and data2)
The share permissions on the folder targets are
Everyone – read, change
The NTFS permissions are
Administrators – Full control
Creator owner – special
DV-Request – Everything but Full control
System – Full control
These permission replicated fine via DFSR
Now the group DV-Request is an AD security group used to control access to this share. But this doesn’t seem to be working, a user in the group cannot access
the share using \\domain.net\data-it\request or directly via the server using \\data01\request$
But if I add the users account directly into the NTFS permission for the share, they can access via both methods... How Crazy is that?
I’m really confused here, This method of using AD groups is what I’ve always used but it doesn’t work. Has anyone seen this before?
ZeniTimes
