cant access folder

[m4a2t0t]

I have this problem accesing a folder using nested groups

I have a share called talkabout, authenticated user have read/change access. Inside that folder I have Admin Docs and inside that I have a payroll folder.

I have a global group called remote office assistants, it is a member of my domain local group DL Payroll. I have given modify access to the group DL payroll. Problem is nobody can access the folder.

When I check effective permissions on the user who is a member of the remote office assistants group I see it has all the necessary access, when I check the group remote office assistants it has no access at all (all boxes are unchecked).

I know my group nesting is working because I have another group called Talkabout TS access which gives access to my terminal server, this group is nested into many other groups and I have access to my TS. Yes I know about the Remote desktop users account but it does not work.

[koldchillah]

Perhaps somewhere there might be a discrepancy between the "share" permissions, and the actual "NTFS" permissions??

At what level are you assigning these permissions, share or NTFS?

[m4a2t0t]

NTFS

Folder = Talk$
NTFS Permissions = Authenticated users = list folder contents
Share Permissions = Authenticated Users = Read/Change

Then I have more folders inside and im using the domain local groups for each directory, but if I dont have the auth users and list folder contents or greater nobody can access the folder, not even the domain admin.

[koldchillah]

NTFS

Folder = Talk$
NTFS Permissions = Authenticated users = list folder contents
Share Permissions = Authenticated Users = Read/Change

Then I have more folders inside and im using the domain local groups for each directory, but if I dont have the auth users and list folder contents or greater nobody can access the folder, not even the domain admin.

Are the global groups nested inside Domain Local groups from the same domain, or another trusted domain?

[m4a2t0t]

Are the global groups nested inside Domain Local groups from the same domain, or another trusted domain?

same domain

[koldchillah]

That sucks.

Has the user logged off/on since the groups and/or permissions were created/modified?

Does it work when you just assign the permissions to the user's global group instead?