New domain controller...

Multiple shares...

Permissions on the shares are set to modify access.
Clients are in the group with Modify access, the group is added to the folder for permissions.

Clients get Access Denied when trying to write anything to the shares.

I have removed all groups except Administrators and the group with modify, and get the same thing.

This also occurs on their personal network drive share, when they are listed as the owner, and the Administrators is the only other group.
They have Full control on their own folders.

Ideas?

Do you have anything set to Deny?

Also, since it in a new domain controller, did you rehoin the workstations to the domain, by removing them and putting them back in?

[This message has been edited by 8Ball (edited 03-05-2011).]

quote Originally posted by 8Ball: Do you have anything set to Deny? Also, since it in a new domain controller, did you rehoin the workstations to the domain, by removing them and putting them back in?

I think I found it in the "Sharing" tab under Advanced Sharing for the root folders.. "Everyone" was set to read only.. Even though the Security tab has the correct groups with the correct permissions..

All PCs have been rejoined.

The original Domain controller had about 15 people that changed things over the last 4 years, and it was beyond repair... Response time on the server was horrible, and permissions were beyond messed up.

Applying permissions now, so waiting to see what happens.

Check and make sure the rights are set on the folders, share rights and folder rights are not the same.

quote Originally posted by Jake_Dragon: Check and make sure the rights are set on the folders, share rights and folder rights are not the same.

Correct. The Share rights will supercede the folder rights when setting via the Security tab...

Another 18 minutes til permissions are done.

What about the rest of the tree?
(The folders their folders are living in?)

quote Originally posted by FieroRumor: What about the rest of the tree? (The folders their folders are living in?)

Folders inherit from the top level for most of the shared folders, unless a sub folder down the tree needs access restricted. Then I uncheck inherit at the folder level down the tree and apply permissions directly.

I am able to write now, now that I eliminated "Everyone" and it's read only access and instead applied the group that contains all of the users.

This opened the share up.

quote Originally posted by Synthesis: Folders inherit from the top level for most of the shared folders, unless a sub folder down the tree needs access restricted. Then I uncheck inherit at the folder level down the tree and apply permissions directly. I am able to write now, now that I eliminated "Everyone" and it's read only access and instead applied the group that contains all of the users. This opened the share up.

Glad you got it to work.