I am not a Novell person, so I may still not have the clearest picture,
but...
Accessing a share over the network does not require login rights, only
privilege to the resource in question.
Some applications, like OWA for Exchange do require login rights, and of
course logging in locally requires login rights.
So, I suppose the answer is yes, you need to change permissions each time.
If you deploy servers in an automated fashion, this can be done with a
simple xcacls script to replace the everyone group with the local users
group. Then all that is necessary is to manage the membership of the local
users group, removing domain users and replacing them with only those groups
that should have access.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, September 10, 2001 3:56 PM
To: NT 2000 Discussions
Subject: RE: DISABLE LOGIN
Thanks and sorry I guess I wasn't clear enough. I want to disable login
as could be done under Novell. This way any users attempting to login
cannot. Does NT have this ability or do I have to remove permissions
every time.
Thanks,
BG
-----Original Message-----
From: brookslaw [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 13:02
To: nt2000
Cc: brookslaw
Subject: RE: DISABLE LOGIN
On that server, right click on the folder that is the share point in
explorer.
Select the Sharing tab.
Click the Permissions button, and grant access to the necessary groups
and
remove the necessary groups. (I believe it is advisable to add
Administrators with Full Control before making any other changes so if
you
do make a mistake you have the ability to fix it.)
A few general rules:
1. Add local administrators with Full Control when modifying permissions
on
a share. This is generally acceptable, and usually saves time later.
2. Users go into Global Groups, use Local Groups for permissions. This
way
you need only change the appropriate group memberships to reflect
organizational changes or employee moves.
3. More finely grained access control can be attained by changing the
permissions on files. The GUI is a bad tool for this on NT4 machines
given
the absence of inheritance. IMO the GUI is preferable in Win2K b/c of
the
presence of inheritance. In NT4 you want to use CACLS or XCACLS, in
most
cases with the /t swicth to force the change down the directory tree.
In
Win2K you rarely, if ever want tou use the /t switch b/c it will break
inheritance and make the permissions more difficult to administer.
4. If removing permissions from any group which contains administrators,
add
administrators with equivalent or greater permissions before removing
the
other group.
----Original Message Follows----
From: [EMAIL PROTECTED]
Reply-To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
Subject: RE: DISABLE LOGIN
Date: Mon, 10 Sep 2001 12:37:44 -0400
Clients from accessing a share on a server from a client.
-----Original Message-----
From: AndrewB [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 12:15
To: nt2000
Cc: AndrewB
Subject: RE: DISABLE LOGIN
What are we talking: Console or Remote?
==============================================================
ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT
==============================================================
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 10, 2001 10:53 AM
To: NT 2000 Discussions
Subject: DISABLE LOGIN
I want to disable login on a Win2k Adv Server.� How do I do that?
BG
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
