ZyXEL Communications NSA 210 User Manual page 396

Chapter 18 Troubleshooting
• Check if the user belongs to a group with conflicting access rights. DENY always
takes precedence. If you allow a user FULL access to a share but set his group
to DENY, then he will NOT be able to access the share.
• The local user should check if there are any existing mapped network drives to
the NSA. He may need to disconnect existing CIFS connections as new CIFS
connection may use previously-saved login information that may be different to
NSA login.
• Check that the array in which the share resides, exists and is not down or
degraded. If the array is down or degraded, see
• If the user is using DFS links, then he can only access the NSA using CIFS and
not FTP.
• Check that the share has not been disabled.
I cannot import domain user or user group information even though testing of the
connection to the domain controller is OK.
• Check the NSA's DNS setting. The DNS server the NSA is using must be able to
resolve the domain controller's address. If the domain controller uses a private
IP address, the NSA needs to use a private DNS server. If the domain controller
uses a public IP address, the NSA needs to use a public DNS server.
• Leave the domain and re-join it.
A domain user can't access a share.
In addition to the checks listed previously for local users, check that the domain
controller is turned on and connected to the network.
A user can access a share but cannot access individual folders or files within the
share.
• Check the Access Control List (ACL) of read/write permissions associated with
the share's specific files and/or folders. Account names added to the list are
linked to the files and folders that they are allowed to access, along with what
kinds of actions they are allowed to perform with those files and folders
(delete, move, rename, and so on).
396
Section 18.2 on page
NSA210 User's Guide
386.