Access Restrictions w/AD

[dervari]

I have a need to create shares that allow everyone read access, but only a certain AD Group write access.

I set it up as follows:

Domain Users - Read
Group1 - Read/Write

In this scenario, no one can write.

If I remove the Domain Users group from the permissions, the people who need need to write can now write, but other users can read.

Since the users that need to write are in both groups, shouldn't the TS3 take the most permissive ACL?

[davo]

No it will default to the tightest security ACL which in this case is read only.