Any FSRM/quota blocking things? I would also hit the volume with a read-only chkdsk and make sure there isn't an underlying file system issue. Check the file server event logs and make sure it isn't having issues communicating with a DC/GC.
From: [email protected] [mailto:[email protected]] On Behalf Of Aakash Shah Sent: Wednesday, October 16, 2013 8:49 AM To: [email protected] Subject: RE: [NTSysADM] File Server Permission Issue You can also try using the "effective permissions" in the Advanced security tab for the user to see if the effective permissions end up being denied for whatever reason. This can also help during testing as you make changes to the permissions to the folder. -Aakash Shah From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of James Rankin Sent: Wednesday, October 16, 2013 8:07 AM To: [email protected]<mailto:[email protected]> Subject: Re: [NTSysADM] File Server Permission Issue If the Share permissions are set thus, what are the NTFS permissions on the files themselves? Is inheritance turned on for all of the folders they are trying to access? Is there any Special access applied in the Advanced section - don't forget, a Deny trumps all. You may need to turn Auditing on specifically for the folder, to see what's happening. Cheers, JR On 16 October 2013 15:56, Robert Cato <[email protected]<mailto:[email protected]>> wrote: Windows 2008 Standard SP2 (Virtual on Hyper-V) A folder on D: is shared with a 1.2TB drive that is 90% full. Share permissions are set for Domain Users - Change, Administrators - Full Control. The issues are 2-3 layers deep in the folder structure. The drives are mapped with logon scripts. There are a couple of isolated issues. 1. UserA gets an access denied when he tries to navigate to: L:\Accounting\Accounts Receivable\. He is one the Accounts Receivable folder by name with modify permission. He can access other folders in Accounting. 2. UserB gets an access denied when he tries to navigate to: L:\Shared\Audit. Domain users is granted modify access and the user is in domain users. No luck so far digging around the Event Logs, not sure if we don't have auditing turned up enough. Appreciate any input about what to audit or where to start troubleshooting. Thanks, Robert -- James Rankin Technical Consultant (ACA, CCA, MCTS) http://appsensebigot.blogspot.co.uk
