Hello.
I just installed a Windows Server 2008 and made it Domain Controller.
Now I need to set some shared folders, to be accessed only by certain groups of users on the domain. I ended up with this problem:
Before any share, as Administrator I create a folder, and remove the permissions inheritance. I add full permissions for the group Administrators. Also set the Owner to Administrators. I login to the server as a user belonging to Administrators group (not Administrator). I try to access the folder but returns permission denied!
When I check the effective permissions of that user on that folder, it shows full permissions.
The same happens using other groups, except that if I add the group Users to the folder, I can access it!
Tried this scenario on other domain, on a Server 2003 Domain Controller and it went as expected.
Do you have a clue on what’s wrong, or what’s missing?