RE: [NTSysADM] Dynamic Access control in Windows Server 2012 R2 question

2015-01-05 Thread Christopher Bodnar
...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Brian Desmond Sent: Friday, January 02, 2015 4:44 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Dynamic Access control in Windows Server 2012 R2 question Correct – the claims are part of the user’s Kerb ticket. So even after

RE: [NTSysADM] Dynamic Access control in Windows Server 2012 R2 question

2015-01-02 Thread Brian Desmond
...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Charles F Sullivan Sent: Friday, January 2, 2015 1:26 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Dynamic Access control in Windows Server 2012 R2 question I can only guess at this, but if you were using the old

RE: [NTSysADM] Dynamic Access control in Windows Server 2012 R2 question

2015-01-02 Thread Charles F Sullivan
...@lists.myitforum.com] *On Behalf Of *Christopher Bodnar *Sent:* Friday, January 2, 2015 10:45 AM *To:* ntsysadm@lists.myitforum.com *Subject:* [NTSysADM] Dynamic Access control in Windows Server 2012 R2 question Just got around to playing with this in a Dev environment. Very interesting stuff. Got it all to work

[NTSysADM] Dynamic Access control in Windows Server 2012 R2 question

2015-01-02 Thread Christopher Bodnar
Just got around to playing with this in a Dev environment. Very interesting stuff. Got it all to work perfectly. Just have one question. So for my Dev environment I had a test setup where it would allow access to a share based on the department attribute in AD. If in Sales or HR, allow. Worked