When you create a new Group on the Zynstra server (using the User Control Console), the following is created:
- Active Directory Organisational Unit
- Shared Folder on the File server
- Shared Folder Active Directory object
- A group with Read Only access to the Shared Drive (naming convention is: share_group_r)
- A group with Write access t the shared drive (naming convention is share_group_w)
You give users Read and Write access to the Group simply by making the users a member of the Group. This is done within the User Control Console, by selecting the Group, selecting Edit, and then selecting the users.
When a user is a member of a Group - they have Read and Write access to the file share.
If you wish to give a user just Read access to the Group, this is done within Active Directory Users and Computers:
If you wish to give another user or group just Read access to a Group Shared folder, you need to add them to the Read Only group in Active Directory.
To do this, open up Active Directory Users and Computers on the domain, and navigate to the OU: HAP > public > Shares > Cluster ID (eg 0000-0123) > group.
Here you will find Organisational Units for each Group. Within each users OU, you will find the Shared Folder Active Directory Object, and also the two groups - one for Read access (share_username_r) and one for Write access (share_username_w)
To give another user Read access to a users Shared folder, add them to the group share_name_r.
To give another user Write access to a users shared folder, add them to the group share_name_w.