It did not answer the question head on, but it left me a bread crumb where I eventually figured out what was going wrong.
The trick is that the "wide open" setting on the DNS 320 where any user on the network can read/write is only valid so long as there are no Users designated. Once a single user goes in, everyone (at least in the Windows world), has to log in as that user.
If you are creating a restrictive user, then you must create another account (besides admin or administrator) that has global read/write permissions. Log in as that new user who has permissions to everything on on the DNS and you are fine.
If you are going to set up Users, the Admin account on the DNS 320 is really only good for administering accounts. You need to set up a separate user for Windows that can read/write to everything. Once you have that you can set up more restrictive users to limit access.
This may be elementary to some, but for somebody like me with only basic computer training who learns most things through trial and error, it was a revelation.

Thanks for the pointer.