File server shares cannot be displayed as Friendly Username or Group name, but fine for Domain Admin

Question

Dear Friends, please help.

I suddenly noticed that permissions on all of our file shares cannot be displayed on our domain computers. However, if I logged in to the actual file server as Domain Admin , I can see everything correctly with friendly names etc.

Any idea what would cause this issue?

Thanks
ML

Answer 1

By default a dc will be able to resolve a sid to name for sids in the forest, however they will not be able to resolve the sid of users and groups created on member servers in the domain. If you log onto the member server where the local users or groups exist, then you will be able to resolve them plus the sids of objects in the domain/forest.

Gary.

Answer 2

Hello there,

This is likely to be a profile issue on the PC where the user is seeing the issue. I suggest deleting the profile and then allowing it to be recreated on the next login. Then try the process again and see if the issue is resolved. You can go to %SystemRoot%\System32\winevt to find relevant logs during the period when you encountered your problem.

The below thread discusses the same issue and you can try out some troubleshooting steps from this and see if that helps you to sort the Issue.\
File server not showing user permissions, advanced settings greyed out https://learn.microsoft.com/en-us/answers/questions/472559/file-server-not-showing-user-permissions-advanced.html

---------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–