What is the output of 'cifs sessions -s' after someone tries to access the share? Are the group assignments as expected? I know having local groups in share-level acls works, so I'm not sure what the problem is in your setup.

One thing to check is that the local group is for the filer, not for the domain. Did you do "User->Select Domain" then enter "\filername" in usrmgr before creating the local group?

btw, if you are planning on sharing data in a multiprotocol way (i.e. with NFS users accessing the same data as NT users), you don't want to rely on share level acls to control access, since they are not used for NFS clients. Normally, in an NT environment the share level acls are left wide open and the access control is done via file-level acls.

Let me know if you can't figure this out.

Mark Muhlestein -- mmm@netapp.com

-----Original Message----- From: Jason Middlebrooks [mailto:Jason_Middlebrooks@datalink.com] Sent: Tuesday, April 13, 1999 4:00 PM To: toasters@mathworks.com Subject: Cifs permissions ???

The following is happening. Any ideas of what to do?

1. I have created a folder called test. 2. Within server manager I create a share for test. 3. Withing user manager I create a user called dude, a global group called dudes_global with several users, and a local group called dudes_local with several users.

First I give one person (dude) permission to access test and everything works fine. (Dude can access test and nobody else can)

Second I remove dude from the permissions list, add a global group (dudes_global) to have permission to access test and everything works fine. (Only the people in dudes_global can access test nobody else can)

Third I remove dudes_global from the permissions list, add a local group (dudes_local) to have permission to access test and then it happens. (Nobody can access test and I mean nobody. I keep on getting not accessible / access is denied)

Anything wrong with using local groups?? Is there any setting that needs to be changed in NT or on the Filer???

F720 DataOnTap 5.3 and all the other stuff...

Jason Middlebrooks Systems Engineer Datalink Corp. jason_middlebrooks@datalink.com