Group nesting troubles

Hi folks, I'm having a bit a problem with some group nesting issues and I
hope some of you might be able to point out the errors of me ways. Please
see the problem below:

A user cannot access a folder on a file server. This folder has NTFS modify
access permission set for "Group C".
The user is a member of "Group A" which is nested in "Group B" which is in
turn nested in "Group C".

Folder Resource -> Group C -> Group B -> Group A -> User

Native mode 2003 domain
Group A (Universal Distribution)
Group B (Universal Security Group)
Group C (Universal Security Group)

If the user is added directly to the folder resource he can access the
folder so I am wondering if this a nesting issue (access token limitation)
or an issue with Security/Distribution? Very much appreciate any help or
pointers. Thank you.

Try creating Group A as a Security Group and mail enable it, I'm not 100%
sure this is your problem but distribution groups don't have sid's assigned
to them, but mail enabled security groups should.

http://www.windowsecurity.com/articles/How-Nest-Users-Groups-Permissions.html

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"barkley bees" <barkbees DeleteThis @nomail.com> wrote in message
news:%23rUbU8LZIHA.5980@TK2MSFTNGP04.phx.gbl...
> Hi folks, I'm having a bit a problem with some group nesting issues and I
> hope some of you might be able to point out the errors of me ways. Please
> see the problem below:
>
> A user cannot access a folder on a file server. This folder has NTFS
> modify access permission set for "Group C".
> The user is a member of "Group A" which is nested in "Group B" which is in
> turn nested in "Group C".
>
> Folder Resource -> Group C -> Group B -> Group A -> User
>
> Native mode 2003 domain
> Group A (Universal Distribution)
> Group B (Universal Security Group)
> Group C (Universal Security Group)
>
> If the user is added directly to the folder resource he can access the
> folder so I am wondering if this a nesting issue (access token limitation)
> or an issue with Security/Distribution? Very much appreciate any help or
> pointers. Thank you.
>
>