AD settings
The user’s access rights are completely carried over from the AD.
- The users must be members of an AD group of the global type.
- Share the drive for this group (under Properties→ Advanced Sharing).
- Grant Full Control, (see left illus., example: Sales Group).
- Add the same group also to Properties→ Security.
- Grant at least the following permissions (see right illus.):
- List folder / read data
- Read extended attributes
- Read permissions
- Change permissions
- Take ownership

Minimum share rights of a drive for user access
Cortado server settings
To allow access to shared folders on the corporate network, directly via the Workplace app, the Windows app or via any web browser (web app), you can grant users this privilege either via a group template or the user management (Users).
- Open Administration→ Group Templates→ Network Drives or Administration→ Users→ Network Drives, to give users access to network drives.
- Mark the group template or one or more users (illus.).
- Then select under Network Drives→ Add in the context menu (arrow in illus.).

Assign drives
For a network drive make the following settings:
- Enter the drive name under Drive name or letter (freely selectable). Alternatively you can enter a drive letter. Under Type of link select Network drive and under Path specify the path to the desired drive.
- If the users have a Home Folder (home directory), in the AD, it can also be made available. For this purpose, enter one of the following variables under Path: %HOMEDIR% (for home folder in AD), %USERUPN% (for UPN) or %USERNAME% (for SAM account name). If the drive letter and directory are to be read out, enter %HOMEDRIVE% above and %HOMEDIR% below.
Note! The option Set up SharePoint access is no longer available as of Cortado Server Version 11.0.
- Repeat the procedure for all desired network drives.
- These network drives are now displayed with the network path and the corresponding drive label under Users→ Network Drives.

- The users now have the configured drives available in the Workplace app, the Windows app and the web app.
Editing shared drives
- Edit: If you want to make changes to a shared drive, select it and click Edit.
- Remove: If you want to delete a shared drive, select it and click Remove.

Editing shared drives
User Storage
Directories created in this way can now be found again in the root directory of the Cortado server (here: C:\User Storage, see illus.).
In the Cortado Server’s User Storage, one folder per user is created with the shared AD network drives.
Note! If you later change the path to the user storage (for example, while running the Configuration Assistant again), the network drives defined here will be lost.