Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was recently appointed to be the admin for my school's publications lab. One of my first duties was to allow several new students access to the K:\Pub folder. I added them to the Publications group in Active Directory, but that didn't seem to work. Looking at the Security Properties on the K:\Pub folder, the Publications group has full permissions (except "Special permissions") on that folder.

I'm new to Windows administration (what little admin experience I have is with Linux), so I think I could be missing something rather obvious. Any help for this new admin would be very much appreciated.

share|improve this question
up vote 1 down vote accepted

Have the users logged off of the domain and logged back on since the time you added them to the group? A user's access\security token is generated at logon and changes to this token (group membership changes) only take affect when a new token is generated at logon.

share|improve this answer
Wow, I can't believe I missed that. Thanks! – Nick Meharry Jan 27 '10 at 19:05
Glad to help... – joeqwerty Jan 27 '10 at 19:08

You are looking at the NTFS permissions, are there any groups that have "Deny" marked and are the new students in them? Deny overrides all NTFS permissions. Another thing to look at would be the permissions on the share if these are being accessed from a network share. Also, if they were added to the AD group after they logged in, they will need to log off and log back on to get the new group membership to be recognized.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.