|
Posted by Roger Abell [MVP] on October 24, 2005, 7:26 am
Please log in for more thread options
Cannot be accomplished.
Ask your senior to specific to what they should have access and
in what way (remote tools/shares, local login, remote desktop, etc.)
If your senior "grumps" about the looseness/limitations of Windows
that it cannot do this, then ask them to do it with any Unix, where
also it cannot be done as stated by yourself.
> Hi,
>
> My senior instructed me to give Read-only access to a small group of
> people on one server. However, this access would include "everything" on
> that server , ie, not just the read-only permission on file and folders ,
> but even the OS and system level applications and properties : eventlog,
> registry , IIS ,system properties, network properties , control panel
> ......EXCEPT they cannot change it.The server is a domain server running
> W2k3 SP1.
>
> Is there anyway to achieve this requirement ? I don't think any built-in
> groups can do that . Could this be done via GPO ?
>
> Please help !
>
> Norman
>
|