When you create a new Group using the User Control Console, the following is created:
- an Active Directory organisational unit
- a shared folder on the file server
- a shared folder Active Directory object
- a group with read-only access to the shared drive (naming convention is: share_department_r)
- a group with write access to the shared drive (naming convention is share_department_w)
You can give users read and write access to the Group by making them a member of the Group using the User Control Console. You select the Group, select Edit, and then select the users. When a user is a member of a Group, they have read and write access to the file share.
If you wish to give a user read-only access to a Group, this needs to be done using Active Directory Users and Computers. If you wish to give another user or group read-only access to a Group shared folder, you need to add them to the read-only group in Active Directory. To do this, open Active Directory Users and Computers on the domain and navigate to OU: HAP > Public > Shares > Cluster ID > Group. Your Cluster ID is an eight digit number (in the form 1234-5678) that uniquely identifies your server and is visible in the Commissioning Console.
In the folder mentioned above, you will find Organisational Units (OUs) for each Group. Within each user's OU, you will find the shared folder Active Directory object and the two groups, one for read access (share_username_r) and one for write access (share_username_w).
To give another user Read access to a users Shared folder, add them to the group share_name_r.
To give another user Write access to a users shared folder, add them to the group share_name_w.