How to restrict access to a shared folder for Windows 2016 domain users?

Question

Active Directory

Good afternoon.
Installed Vin2016, created a domain. in this domain created the user (Test).
1. Shared disk D for general access, gave the rights "Read only". The user naturally cannot delete, create, etc. anything.
2. Then another folder (Folder2) was created on drive D. In the "Security" - "Advanced" tab, I removed all inheritance. Manually Added Permission for user Test, giving him full access. On the "User Effective Rights" tab, I checked that this user has full rights.
3. I entered the client computer into the domain. I go under the Test user from it to the shared disk (D), I find in it the folder (Folder2) to which I should have full rights and I can’t do anything in it. neither create nor delete. View only.
Where did I go wrong or didn't finish? thanks in advance.

Answer 1

There are two types of rights: network - given to the shared folder (ro, rw, full) and ntfs rights, in the security tab. For easier management, set network rights to rw, and more precisely configure ntfs with rights. Yes, for more understanding, read books from MS, or on MSDSN

Answer 2

I support Dmitry . Because you did not clearly indicate at what level you cut the smb or ntfs rights - then you don’t have a clear idea yet, and in 1 case you cut it at the smb level, and in the second case at the ntfs level. Set in the sharing tab ALWAYS for all rw (this is access via the smb protocol), and already scatter the rights on the security tab (this is at the FS level).
PS. it does not depend on the version of Win - it is standard for all versions.

Answer 3

Thank you all for your help. Really did not think at the expense of distinctions between the network rights and ntfs-rights.