I have DFS on a Windows 2008 R2 servers. I have ABE enabled. On the folder target, I have "Set explicit view permissions." When I configure view permissions and add an individual user account, that user can immediately see that folder target. When I remove the user, they immediately lose view of the target. Perfect behavior so far...
However when I use groups instead of individual user accounts, it does not work at all. A user who is a member of the group cannot see the share. I have tested this every way I can think of. I've even created a new group, added a user, then added the group to DFS ABE permissions, and it doesn't work. Then I add the user who is in that group, and that user can see the folder. I've tried it in the GUI console, and I've tried using Powershell, and it behaves exactly the same every time. It is very consistent.
Everything I read about ABE says you're supposed to be able to use groups to control access. It works perfectly with individual accounts, but not at all with groups. Anyone know what I'm missing here?
Dan