usually domain user has read permission on fileshare hosted in DC.
You may need to check if the user getting access denied message which user account being used?
Or you may need to check which account use to login to windows 10 while connect the share on DC.
Or another possibility could be the specify share is denied that user account if it is domain user.