What you have done sounds correct.
If you have a folder that is shared, and in the NTFS permissions
dialog for that folder you see only grants to Administrators and
to CustomGroup, and these are set explicitly (not inherited) on
that folder and these are inheriting on down within
but
you find any domain account can access within the folder
then
all domain accounts are members either in Administrators or
in CustomGroup on the sharing machine, or all accesses are
being remapped to use a domain account that is (such as by
having network credentials defined or by explicitly doing
a connect-as; for the first check while logged in as an account
that does but should not have access by issuing at start/run
"control keymgr.dll" without the "s of course).
There is just no other explaination.
<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> So I'm feeling kind of dumb right now, and I'm hoping y'all can help
> me figure out what I've overlooked...
>
> We have a W2K server domain with 4 servers and some odd 50 pc's. Two
> servers are located off site at remote locations, the other two are
> local.
>
> I've created security groups for several folders, removed the
> inherited permissions, and set permissions for the administrators, and
> individual security groups only...
>
> However comma
>
> This hasn't worked. Anyone on the network can browse the folders in
> question, open, modify, create and delete.
>
> I'm at my wits end, and my googling skills are apperantly lacking...
>
> Suggestions? Further information?
>
> Thanks
>
|
Similar Threads
