In the past few weeks I was trying to modify the Active Directory and User Group setting in our company. However, due to the lack of the proper documentation, after making the changes unexpected side effects started to pop out.
The last problem I encountered was about network shares.
Since multiple generations of IT guys have worked in this company, each one of them has made changes to the Active Directory, but none of them has done documentation. Hence, the Active Directory and GPOs have grown to the point they have become chaotic. I decided to untangle this mess and started working on it.
There is one Domain Controller and one Terminal Server. We use Terminal Services. The users connect to the Terminal Server via Remote Desktop Connection and do most of their work there.
The users have access to some network shares, shared from the Domain Controller.
I'll illustrate the problem via example: User
A, is member of Group
X. I remove
A from group
X. Then the user is not able to access a folder shared in the network.
I check the
Properties of this folder.
Permissions: includes the groups
Securitytab --> under
Groups or Usernamesection, the
Xis listed. 
So why when I remove user
A from group
A does not access to this shared folder. Isn't user
A considered as part of the
Everyone user group. Shouldn't he have all the permissions via
To generalize my question. How do
Sharing Permissions and
Security Permissions cooperate with each other? What are the dependencies between them.
Basically, does this mean that when I want to share a folder with a certain group of users, that group has to be listed both in
Shared Permissions  and
Security Permissions ?