Any new user that is added to the domain is getting "access denied" when trying to access any shared files on a NT server. I have tried both rights assignment by user and group, same result. On the other hand they can access any shares they have rights to on any of my 2000 servers. Note any exsisting users that had rights to the NT servers before the AD upgrade still can access the NT servers.