security group doesnt work 1

[bookouri]

I created a new Global Security Group in AD Users and Computers. I added users to that Security Group and then created a share on the network and granted full access to that global security group. The users in that group still can not access the share. I can add the users individually into the share permissions and it works just fine. What could be keeping the Security Group from working to allow members of that group access to the share?
thanks for any suggestions..

 

[lhuegele]

You may just need to give AD some time to propagate through the rest of your domain.

Also, there are share permissions and then there are file access permissions. Which permissions are you discussing here?

Good luck,

 

[Davetoo]

You also have to have your users logoff and log back on after you've added them to the group in order for it to take effect.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[bookouri]

i have set the share and the file access permisions so that this new group has full control..
I didnt try logging off and back on.. I can sit here and grant myself access to the share and it immediately works for me.. i can then remove my access and it takes effect immediately... but ill try the logging off and back on thing just in case..

thanks

 

[Davetoo]

For shares and security, that is correct, but not for group membership. It's only applied at logon.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[bookouri]

i cant believe i never realized that... but you're absolutely right.. if you add a user to a share he is granted access immediately. If you add a group to a share that the user belongs to, he is only granted access when he logs back on...

thanks for all the responses...

 

[Davetoo]

No...when you add a user to a group, that change only takes effect after the users logs in next. So, since you'd just created the group and added users to it, then added that group to the share/security of a folder, the users can't access the share until they log off and log back on (or run gpupdate...easier to have users log off/on though). This is due to the change of the users being added to the group...not due to the group being added to the share/security.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.