...
o Some privileges to shared drives were granted at the container level in Novell, but that wasn’t possible in Active Directory. Therefore groups have been created to reflect the users’ contexts. For example, If context = techsup.it.admin.ul then a group was created to mimic that:it$techsup.techsup.it.admin.active.users.ul . These groups are not maintained automatically. You will need to add new employees to these groups to grant access to a folder.
Best Practices
Whenever possible, assign permissions to groups rather than users.
...