Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to give one user access to a certain folder in a share. The share gives Everyone Change/Read access. Likewise Domain Users has read/write permissions on the root of the share.

One of the folders is for IT use only so I've disabled inheritance and manually added Domain Admins (full control), my user account (full control), and am attempting to add another user through a group called IT_Low.

IT_Low is a universal security group that has just one user in it. When I add this group and give it read/write permissions on the IT folder this user is unable to access the folder at all. The only way I've been able to give him access is by adding his user directly or by adding Domain Users.

This doesn't make any sense to me. Why is the IT_Low group being ignored? I've triple checked that he is the sole member of that group.

Thanks, Chris.

share|improve this question
up vote 2 down vote accepted

Have you logged him out and then back in? The security token is issued when you log in, so if you add someone to a new group, they need to have the token re-issued to include that group's permissions. If they are already a member of a group, and the permissions on a directory change, they do not need to log out and then back in.

share|improve this answer
You're my hero. I had no idea about this. – idon'twearsuits Jul 6 '11 at 18:13
@Chris Thank you. I am glad that was it. – KCotreau Jul 6 '11 at 18:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.