Different groups can't log in to 10.6

[dezt]

Here's the problem I've got, we have 10 iMAC's running OS X 10.6, we have 1 MAC Mini server running server OS X 10.6. The OD is bound to AD, and the clients are bound to the AD & OD.

So far so good. I have 3 groups setup in OD, 1 for Staff, 1 for Pupils, 1 for Admins.

The groups contain the following AD groups.

OD Staff -> AD Staff
OD Pupils -> AD Pupils
OD Admins -> AD Domain admins.

When I login, I can login using an AD Staff account or an AD Domain Admin account. When I try and login using an AD Pupil account I get an error saying the account <name> cannot log in at this time. An error has occured.

Can anyone shed any light as to why this only happens when I use an AD Pupil account and not any other AD accounts? I haven't set any restrictions on my OD server yet so the only difference is that the AD groups are different for staff and pupils.

[dezt]

Never mind, just realised that the pupils group didn't have rights to the pupil area share to allow the mac to map the drive. How stupid do I feel, oh well, at least it all works now.