The problem of the control of AD and Server-u permissions. In fact, the right to control through the ad is still very inaccurate, it should be said through the NTFS file system permissions to control the permissions. Ad just controls the account.
As I said in my previous article, "Directory Access" permission controls that are organized in SERVER-U are superimposed on NTFS permissions control. Now it seems that the conclusion is somewhat arbitrary, because there are other things involved in the middle. Nfts permissions settings, root settings, access directory settings. Now let's introduce.
Case One: Nfts permissions have been configured, the organization's root directory has been configured, but access to the directory is not set.
Nfts permission set complete
The organization's highest organization root directory has been set
Directory access is not configured for tier two organizations