Click here to get back home

Read-Only Access to the entire server - everything , not just the Files & Folders

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Read-Only Access to the entire server - everything , not just the Files & Folders Norman 10-23-2005
Posted by Norman on October 23, 2005, 8:12 pm
Please log in for more thread options
Hi,

My senior instructed me to give Read-only access to a small group of people
on one server. However, this access would include "everything" on that
server , ie, not just the read-only permission on file and folders , but
even the OS and system level applications and properties : eventlog,
registry , IIS ,system properties, network properties , control panel
.......EXCEPT they cannot change it.The server is a domain server running
W2k3 SP1.

Is there anyway to achieve this requirement ? I don't think any built-in
groups can do that . Could this be done via GPO ?

Please help !

Norman




Posted by Roger Abell [MVP] on October 24, 2005, 7:26 am
Please log in for more thread options
Cannot be accomplished.
Ask your senior to specific to what they should have access and
in what way (remote tools/shares, local login, remote desktop, etc.)
If your senior "grumps" about the looseness/limitations of Windows
that it cannot do this, then ask them to do it with any Unix, where
also it cannot be done as stated by yourself.

> Hi,
>
> My senior instructed me to give Read-only access to a small group of
> people on one server. However, this access would include "everything" on
> that server , ie, not just the read-only permission on file and folders ,
> but even the OS and system level applications and properties : eventlog,
> registry , IIS ,system properties, network properties , control panel
> ......EXCEPT they cannot change it.The server is a domain server running
> W2k3 SP1.
>
> Is there anyway to achieve this requirement ? I don't think any built-in
> groups can do that . Could this be done via GPO ?
>
> Please help !
>
> Norman
>




Similar ThreadsPosted
Hide folders / files with no access October 4, 2006, 12:10 pm
Create a domain account with full access to all files and folders? October 24, 2006, 11:03 am
Make a filetype readonly March 13, 2007, 11:07 am
Restrict copy access on files on server June 8, 2006, 5:36 pm
Execute access to files from Terminal server August 3, 2007, 2:17 pm
Files and Folders April 3, 2006, 4:40 am
Locking folders but NOT files. How? January 5, 2007, 9:20 am
Audit Folders and Files December 5, 2007, 11:11 am
Special Permission for folders and files January 12, 2006, 12:04 pm
Audit - Summary of the folders and files November 6, 2006, 8:58 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap