Shared Folder

[jeffb]

The file itself is set to full control.

 

[jeffb]

The user is logged in as a domain user not a local user. The workstations are setup so the user doesn't have to enter a password when logging on, just ctrl,alt,del then enter and they are connected. When trying to access the server to access the share it asks for credentials, then comes back with you don't have access to the share. What's even more confusing is this user can access the sysvol folder which isn't shared.

 

[TazUk]

The workstations are setup so the user doesn't have to enter a password when logging on, just ctrl,alt,del then enter and they are connected.

Any reason why it's setup that way?

If you turn that off, so they have to enter their password at logon time, does it work correctly?

 

[Moltuae]

Sysvol is accessible to domain users by default. It has to be to allow access to the relevant policies and scripts.

I'm wondering if this is an inheritance issue. Have you checked/disabled inherited permissions of any parent folders?

Can you post some screenshots of your NTFS/share permissions configs?

 

[jeffb]

Any reason why it's setup that way?

If you turn that off, so they have to enter their password at logon time, does it work correctly?

The staff I work with is older and doesn't like change and it was just easier than trying to explain why they needed to remember a password and less work for me resetting passwords all the time. I changed the login to having to enter the password and it doesn't recognize the username or password. I have reset the password and the account and nothing changed, not able to login on the user account.

 

[YeOldeStonecat]

Let's iron out the network setup, and how the workstation is logging in. Because I frequently see workstation log in using a "local account"...instead of a "domain account".
Workstation should be logging in with the format DOMAINNAME\USERNAME and password. Not a local user account as in WORKSTATIONAME\USERNAME

Workstation MUST use the IP of the DC for its DNS. Nothing else. I typically see the router doing DHCP for the LAN, creating havoc with proper active directory functionality since the router gives out itself for DNS or the ISPs DNS...which of course neither of which know anything about the AD on the server.
Server...MUST use IP of itself..for its DNS, nothing else.
DNS forwarders set in DNSMGMT.MSC

On the folder share...
SHARE permissions...set to EVERYONE, full control
Security tab (NTFS)...I set to Domain Users, Administrator, System, Domain Adminstrators. Peel back as necessary from here....to limit end users, security groups for example.

 

[jeffb]

The workstations are setup to login as follows: DomainName\Username; Password. My network layout in a nutshell, IP- cable modem- with dhcp disabled \ cisco 2960 switch\ 2008 R2 server configured for DNS, DHCP. I have 2 servers one is primary DNS and the other is secondary DNS.

 

[Markverhyden]

Have you tried moving the shared folder out of the root directory and putting into a user's folder? I always seem to have more problems sharing with the share point in the root directory.

 

[thecomputerguy]

End user maybe