I have a member server in an AD environment with a DFS share setup. The root folder of the share has Inheritance turned off. Below that I have a file structure, and at a lower level I have a folder with three sub-folders. I also created a local group on this server and added a user from AD to that group. From the server, when I browse to one of the sub-folders and run Effective Access on this user, it shows he has full rights. From this user's workstation, when he browses to this sub-folder (I created a shortcut for him to jump over the folders he doesn't have access to), I look at this same folder and Effective Rights shows he has no access. From the workstation I can call up the group that the user is a member of that is granting his rights, and the group shows Full Access, but the user who's a member of the group shows nothing.
I created an Active Directory group and replicated the setup, making the user a member of this AD group. I then granted this group Full Rights to the same folder with 3 sub-folders, but still the user says he is getting errors when he tries to save files there. He can browse to the folders, so he does have some rights, but I can't figure out why there is such a discrepancy between the workstation and the server. I can understand that my admin account on the server can see more than his non-admin account on his workstation, and that might be why he can't view Effective Rights, except that he can view the rights of the group that is granting him rights to the folder, and it shows Full Access.
It's just strange. I ran chkdsk but it didn't find any errors. Does anyone have an idea what I should look at to figure out why this user is not actually being granted the rights through either the local or the AD group that has been setup to do so?