I need some help wrapping my head around DFS security. It appears that users that don't have admin$ share access to my file servers don't have access to the DFS shared folders. they can see\\Domain\Namespace but not \\Domain\Namespace\folder. they get an access denied when clicking on it. I have ensured that the file and folder permissions have that users ID and granted full control.
I also noticed that if I try to access the folder directly using \\servername\d$\folder then they still have the problem. It appears to me that DFS is translating the Namespace to the literal path when they try to access it the share. and it's trying to go through the admin share to access the target folder.
Is there a way of granting access to the folder to non admins?
Yeah Buddy!