Can't map the drive to share by AD group member

[uit501]

Hello
We have F4-223. TOS v5.1.131-00123
AD domain connected successfuly
share1 is created and rw rights are granted to one domain user user1 and one domain group group1
user2 is domain user and group1 member
when i want to grant rw rights to share1 for user2, nas webui shows its done already
when i login to nas webui as user2 i can see share1 and read and write to it
but when i'm trying to map share1 through windows explorer or net use command - access denied

ps: user1 can map the share1

[TMzethar]

May I ask if you have already logged in with another user on this PC, such as user1? Or guest?
You can try clearing the SMB cache and credentials, and then try again.
For detailed operation and more possible troubleshooting guidelines, please refer to:viewtopic.php?t=2759

[uit501]

Hello! I checked all possible troubleshooting guidelines from viewtopic.php?t=2759
None of them helped me.
BTW When i try to clear cache, stop the smb service and restart tos. After restarting tos smb service is already enabled. I checked this twice.

I'm trying to map shared folder with command

Code: Select all

net use * \\<ip>\share1 <pwd> /user:<ADDOMAIN\user2> /persistent:no

the result is 'access denied' for user2 in ad group. for user2 rw rights were set by group

if i make this command for user1, which has explicit rights given to shared folder, access is granted

i've tried this for all four types of permissions when creating shared folder (no limit, by user, by user group, administrators have full ...)

[TMzethar]

The current TOS version does not support group permissions for domains, we are working on this issue, please wait for the TOS6 update.

[uit501]

Hello! It's no sence to advertise active directory support in product specifications. Me as a customer was misled by that AD support is partially implemented. Now the way to use NAS for AD users is to make one shared folder for one user OR use the webui. This is not ok.

I would like to make changes to samba config manualy. Could you explain me how can I make changes to samba config? For now my changes are overwritten after nas restart.

[TMzethar]

In a later version of TOS6, AD domains will support SAMBA user group permissions. A shared folder can be accessed by multiple users at the same time. You can still do this by setting user permissions, although the operation may be cumbersome.

[uit501]

I see. I should delete ad group permissions first. then i can grant permissions to ad users. otherwise if ad group includes ad user, webui shows permissions for ad user already exist.