Can you run: whoami /groups
from a command line. That will give you a list of all the groups that is in your current security token. Compare that to the icacls list that Jorke's command gives. Also, have you changed any UAC settings on your machine? Cheers Ken From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Greg Keogh Sent: Thursday, 24 March 2011 12:06 PM To: 'ozDotNet' Subject: RE: [OT] Domain groups ineffective Did you logoff and log back on? The groups in your security token are populated when you logon. Reboots and re-logins have no effect. I can assign an old group (containing me) to a folder and it gives me permissions immediately as you'd expect. If I do the same with a new group there is no effect. I checked I am making Global Security groups, not some other type. I'm creating the groups the same way I did weeks ago. This problem is also tricky because I can't yet find any Google search word combinations that give useful results. Greg
