Click here to get back home

users, groups, and access to a folder
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
users, groups, and access to a folder milosnik.boczku 05-02-2006
Posted by milosnik.boczku on May 2, 2006, 11:17 pm
Please log in for more thread options
 Dear All,

Let's say I've got 2 servers: A - domain controller (Domain), B - file
server.

Users list on Server A:
Domain users: userA, userB, UserC, UserD
Domain admins: userB
Domain groupX: userC

Users list on Server B:
Users: UserlocA
Users: Domain\groupX
Admins: Domain\admins


Can I assign following permission to the folder "FolderA"
<revoke all inherited rights>
Domain\userD - Full Access?

I am curious if a userD, who has not been defined as a member of any
local group, can have an access to the folder on the ServerB?

Thank you,
MB


Posted by Steven L Umbach on May 3, 2006, 12:48 am
Please log in for more thread options
 Sure that is possible in a domain environment where you can explicitly give
a domain user permissions to a folder on the domain member computer
[home/redirected folders are good examples] however best practice is to
generally add users to a global group and then add that global group to a
local group on the computer and give that local group permission to the
share. Of course in cases where only the user should have access to the
folder use just the user account. --- Steve


> Dear All,
>
> Let's say I've got 2 servers: A - domain controller (Domain), B - file
> server.
>
> Users list on Server A:
> Domain users: userA, userB, UserC, UserD
> Domain admins: userB
> Domain groupX: userC
>
> Users list on Server B:
> Users: UserlocA
> Users: Domain\groupX
> Admins: Domain\admins
>
>
> Can I assign following permission to the folder "FolderA"
> <revoke all inherited rights>
> Domain\userD - Full Access?
>
> I am curious if a userD, who has not been defined as a member of any
> local group, can have an access to the folder on the ServerB?
>
> Thank you,
> MB
>



Posted by Roger Abell [MVP] on May 3, 2006, 2:29 am
Please log in for more thread options
Sure (although direct grants to individual accounts is not the
best way to do things), yes you can grant to the account in
an ACL for NTFS access.
Now, whether that account can use that grant will depend on
whether it also has the Log on over the network user right
granted to it on that machine.

> Dear All,
>
> Let's say I've got 2 servers: A - domain controller (Domain), B - file
> server.
>
> Users list on Server A:
> Domain users: userA, userB, UserC, UserD
> Domain admins: userB
> Domain groupX: userC
>
> Users list on Server B:
> Users: UserlocA
> Users: Domain\groupX
> Admins: Domain\admins
>
>
> Can I assign following permission to the folder "FolderA"
> <revoke all inherited rights>
> Domain\userD - Full Access?
>
> I am curious if a userD, who has not been defined as a member of any
> local group, can have an access to the folder on the ServerB?
>
> Thank you,
> MB
>



Similar ThreadsPosted
Users are disappeared from security groups October 19, 2005, 6:44 am
Local Users & Groups Migration April 5, 2006, 9:19 am
Why my users can't change their home folder permissions while they ... August 28, 2006, 5:05 am
ACLs - Users with READ can MOVE a whole folder? April 11, 2007, 10:45 am
Nesting domain groups under local groups March 18, 2007, 3:56 am
Everybody denied access to a folder June 19, 2006, 4:52 am
Anonymous folder access December 13, 2006, 9:14 pm
Deny folder access for administrators January 24, 2006, 4:28 am
Remove List Folder access only? March 16, 2006, 2:18 am
Audit file/folder access February 12, 2007, 10:52 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap