AD Permission Groups.

Hi,

I have a need to configure some permissions on shared folders on a Win2000 Server.

Basically, I have a list of people who should have r/w permissions, and everyone else on the network should only have r/o permissions.

I have to do this on a number of folders that have different people with r/w access to each folder, but in every case everyone else on the network has r/o access to the folders.

I have no problems setting up global/local groups. What I can't get my head around is how to cope with all these different 'everyone else' who have r/o access.

Any ideas greatfully received.

Many thanks.

 

The basic rules with authentication is that specific rules over-ride less specific rules.

If you set the group "Domain Users" to Read-only, and user George to Read/Write, for George, the second rule will over-ride the first because it is more specific to him.

So for your problem set "Domain Users" to Read-only, and your small group to Read/Write. Members of the small group will automatically be assign the group's ruleset rather than the "Domain Users" ruleset as the small group is more specific to them. You do not have to specifically add an "unless user is a member of small group" ruleset.

 

That seems to ring a bell from the dim and distant past.

I'll give it a go.

Many thanks ReggieB.