Ticket 04 — Missing Group Membership

Ticket Summary

Daniel Carter reported that he could no longer access the Sales shared folder.

User Request

Daniel submitted a service-desk ticket reporting that access to the Sales shared folder was no longer available.

Daniel Carter Sales access ticket submitted

Daniel Carter's Sales shared-folder access request submitted through osTicket.

Because Daniel could still authenticate to Windows, the initial symptom pointed toward an authorization problem rather than an authentication failure.

Investigation

I first reproduced the reported problem by attempting to access the Sales shared resource using Daniel's account.

Daniel Carter Sales access denied

Daniel Carter receiving an access denied result when attempting to access the Sales shared resource.

The test confirmed that:

Daniel could authenticate to the domain.
The Sales resource was available.
Access was being denied at the authorization level.

The next step was therefore to examine how access to the Sales share was controlled.

Checking Group Membership

The Sales resource was configured to use Active Directory security-group membership for authorization.

I checked Daniel's account in Active Directory, where the missing "GG-Sales" membership was identified as the cause of the access failure.

The access path was:

Daniel Carter
      │
      ▼
Active Directory Account
      │
      ▼
GG-Sales Membership
      │
      ▼
Sales Share Permissions
      │
      ▼
Access

Since Daniel was no longer a member of "GG-Sales", he no longer had the group-based authorization required to access the Sales share.

Root Cause

Daniel Carter had been removed from the "GG-Sales" security group.

The Sales share permissions themselves did not need to be changed. The problem was with the user's group membership.

Technical Resolution

I restored Daniel's membership in the "GG-Sales" security group.

Daniel added to GG-Sales

Daniel Carter's "GG-Sales" membership restored in Active Directory.

This restored the authorization relationship between Daniel's account and the Sales resource without modifying the existing share permissions.

Access Verification

After restoring the group membership, I tested Daniel's access to the Sales shared folder again.

Daniel Carter Sales access restored

Daniel Carter successfully accessing the Sales shared resource after the group membership was restored.

The successful access test confirmed that the missing "GG-Sales" membership had been the actual cause of the problem.

The troubleshooting process was therefore:

Access denied
     │
     ▼
Check authorization
     │
     ▼
Check group membership
     │
     ▼
GG-Sales membership missing
     │
     ▼
Restore membership
     │
     ▼
Test Sales access
     │
     ▼
Access restored

Service Desk Resolution

Once the technical issue had been resolved and Sales access verified, I documented the outcome in osTicket.

Daniel Carter Sales access resolved and closed"

Daniel Carter's ticket showing the completed resolution and closure in osTicket.

The ticket was closed only after the technical fix had been verified from the user's access path.