On that server, right click on the folder that is the share point in
explorer.
Select the Sharing tab.
Click the Permissions button, and grant access to the necessary groups and
remove the necessary groups. (I believe it is advisable to add
Administrators with Full Control before making any other changes so if you
do make a mistake you have the ability to fix it.)
A few general rules:
1. Add local administrators with Full Control when modifying permissions on
a share. This is generally acceptable, and usually saves time later.
2. Users go into Global Groups, use Local Groups for permissions. This way
you need only change the appropriate group memberships to reflect
organizational changes or employee moves.
3. More finely grained access control can be attained by changing the
permissions on files. The GUI is a bad tool for this on NT4 machines given
the absence of inheritance. IMO the GUI is preferable in Win2K b/c of the
presence of inheritance. In NT4 you want to use CACLS or XCACLS, in most
cases with the /t swicth to force the change down the directory tree. In
Win2K you rarely, if ever want tou use the /t switch b/c it will break
inheritance and make the permissions more difficult to administer.
4. If removing permissions from any group which contains administrators, add
administrators with equivalent or greater permissions before removing the
other group.
----Original Message Follows----
From: [EMAIL PROTECTED]
Reply-To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
Subject: RE: DISABLE LOGIN
Date: Mon, 10 Sep 2001 12:37:44 -0400
Clients from accessing a share on a server from a client.
-----Original Message-----
From: AndrewB [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 12:15
To: nt2000
Cc: AndrewB
Subject: RE: DISABLE LOGIN
What are we talking: Console or Remote?
==============================================================
ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT
==============================================================
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 10:53 AM
To: NT 2000 Discussions
Subject: DISABLE LOGIN
I want to disable login on a Win2k Adv Server.� How do I do that?
BG
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
