Joined
·
20 Posts
I have recently taken over a Sysadmin position and decided to try and implement groups in our AD to administer shared resources.
I have 2 2003 servers in a single domain and both are DCs. I had to raise the domain functional level as it was still sitting as Mixed but is now at 2003.
I can create groups and add users to them with no problems. I can also allocate these groups to shared folders with no issues. My problem rises when I try to nest groups. If I nest one group inside another I cannot get access to any shared folders I give that group permissions to! (eg I have a group G sysadmin which only has one user in it, if I then nestthat group inside a Domain Local group ,say DL sysadmin, and then give the DL sysadmin group full control to the Sysadmin share I have created I get an access denied error BUT if I only add the G sysadmin group tothe share I get access no problem!) any ideas??? Please tell me I don't need to reboot my servers after raising the functional level!
Basically I get the same error no matter what if I nest one group inside another!
I have 2 2003 servers in a single domain and both are DCs. I had to raise the domain functional level as it was still sitting as Mixed but is now at 2003.
I can create groups and add users to them with no problems. I can also allocate these groups to shared folders with no issues. My problem rises when I try to nest groups. If I nest one group inside another I cannot get access to any shared folders I give that group permissions to! (eg I have a group G sysadmin which only has one user in it, if I then nestthat group inside a Domain Local group ,say DL sysadmin, and then give the DL sysadmin group full control to the Sysadmin share I have created I get an access denied error BUT if I only add the G sysadmin group tothe share I get access no problem!) any ideas??? Please tell me I don't need to reboot my servers after raising the functional level!
Basically I get the same error no matter what if I nest one group inside another!
