ih8pcs

Hi to everyone and thanks for taking the time to read and/or answer my post. Here goes.

I have a Windows 2003 Server w/all patches and updates in a domain (Domain1).
I have 4 workstations running Windows XP Pro w/all latest patches and updates.
I have 4 actual human users that use the workstations.
I have 1 test user (test.user@domain1.com).
All workstation PC's are Dell GX620's

I have created a shared folder within a shared volume on the 2003 Server called share1.
I have created a security group in AD called Sec-Share1-Admins.
I made my 4 human users and my 1 test user members of this security group.
I set the share permissions on share1 granting Full Control/Change/Read access to the Sec-Share1-Admins group and disabled inheritance.
I set the NTFS permissions on share1 granting Full Control access to the Sec-Share1-Admins group.
I informed my users they could now use the share, but they emailed me stating they could not created objects such as sub-folders, docs, or anything else, citing an access denied message.
I verified the message and had user1 disconnect from the share drive. I then performed a Run, \\WindowsServer2003\Drive\share1, and then user1 could create to his hearts content.
Tried the exact same proceedure on user2 with no success. No matter what I tried he couldn't write to share1.
I verified his group membership and triple-checked the permissions on the share/NTFS. I verifed his password and account status, which were all in working order. I logged into user2's workstation using my test user. Test user had no problems whatsoever. Logged back in with user2's credentials and still no luck. I ended up granting permissions to user2's account and then he could perform all desired operations.

This does not make sense. The security group user2 is a member of has full control over this share. There are no deny's on the share or NTFS permissions. What am I missing?

Thanks again for any and all help.

djaburg

Check your Share permissions and make sure that they are accessing the folder from the EXACT same way. For example, if you have a folder called public and users inside of that, and both are shared, if you connect to \\server\public\users you use one permission, but if you connect to \\server\users you will be using a different set. Just a thought.