I may be misunderstanding but it seems like all he needs is the AD
equivalent of the NT4 Account Disabled check box.
Chris Hyche
-----Original Message-----
From: Patrick R. Sweeney [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 13, 2001 12:43 AM
To: NT 2000 Discussions
Subject: RE: DISABLE LOGIN
I only said that it does not require login rights, not that it doesn't
authenticate. So actually, I am completely right.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Giardina, dhr.
N.(ICTS)
Sent: Wednesday, September 12, 2001 3:06 AM
To: NT 2000 Discussions
Subject: RE: DISABLE LOGIN
Hi
You are not completely right. There is a login authentication everytime you
access a share
over the network. you can test this by disabling the account while you are
logged on.
After replication is completed you will not be able to connect to the share
any longer,
this implies that authentication failed
Regards
> -----Oorspronkelijk bericht-----
> Van: Patrick R. Sweeney [SMTP:[EMAIL PROTECTED]]
> Verzonden: woensdag 12 september 2001 2:27
> Aan: NT 2000 Discussions
> Onderwerp: RE: DISABLE LOGIN
>
> I am not a Novell person, so I may still not have the clearest picture,
> but...
>
> Accessing a share over the network does not require login rights, only
> privilege to the resource in question.
>
> Some applications, like OWA for Exchange do require login rights, and of
> course logging in locally requires login rights.
>
> So, I suppose the answer is yes, you need to change permissions each time.
>
> If you deploy servers in an automated fashion, this can be done with a
> simple xcacls script to replace the everyone group with the local users
> group. Then all that is necessary is to manage the membership of the
> local
> users group, removing domain users and replacing them with only those
> groups
> that should have access.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> [EMAIL PROTECTED]
> Sent: Monday, September 10, 2001 3:56 PM
> To: NT 2000 Discussions
> Subject: RE: DISABLE LOGIN
>
>
> Thanks and sorry I guess I wasn't clear enough. I want to disable login
> as could be done under Novell. This way any users attempting to login
> cannot. Does NT have this ability or do I have to remove permissions
> every time.
> Thanks,
> BG
>
> -----Original Message-----
> From: brookslaw [mailto:[EMAIL PROTECTED]]
> Sent: Monday, September 10, 2001 13:02
> To: nt2000
> Cc: brookslaw
> Subject: RE: DISABLE LOGIN
>
> On that server, right click on the folder that is the share point in
> explorer.
>
> Select the Sharing tab.
>
> Click the Permissions button, and grant access to the necessary groups
> and
> remove the necessary groups. (I believe it is advisable to add
> Administrators with Full Control before making any other changes so if
> you
> do make a mistake you have the ability to fix it.)
>
> A few general rules:
> 1. Add local administrators with Full Control when modifying permissions
> on
> a share. This is generally acceptable, and usually saves time later.
>
> 2. Users go into Global Groups, use Local Groups for permissions. This
> way
> you need only change the appropriate group memberships to reflect
> organizational changes or employee moves.
>
> 3. More finely grained access control can be attained by changing the
> permissions on files. The GUI is a bad tool for this on NT4 machines
> given
> the absence of inheritance. IMO the GUI is preferable in Win2K b/c of
> the
> presence of inheritance. In NT4 you want to use CACLS or XCACLS, in
> most
> cases with the /t swicth to force the change down the directory tree.
> In
> Win2K you rarely, if ever want tou use the /t switch b/c it will break
> inheritance and make the permissions more difficult to administer.
>
> 4. If removing permissions from any group which contains administrators,
> add
> administrators with equivalent or greater permissions before removing
> the
> other group.
>
>
>
> ----Original Message Follows----
> From: [EMAIL PROTECTED]
> Reply-To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
> To: "NT 2000 Discussions" <[EMAIL PROTECTED]>
> Subject: RE: DISABLE LOGIN
> Date: Mon, 10 Sep 2001 12:37:44 -0400
>
> Clients from accessing a share on a server from a client.
>
> -----Original Message-----
> From: AndrewB [mailto:[EMAIL PROTECTED]]
> Sent: Monday, September 10, 2001 12:15
> To: nt2000
> Cc: AndrewB
> Subject: RE: DISABLE LOGIN
>
> What are we talking: Console or Remote?
>
>
> ==============================================================
> ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT
> ==============================================================
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Monday, September 10, 2001 10:53 AM
> To: NT 2000 Discussions
> Subject: DISABLE LOGIN
>
>
> I want to disable login on a Win2k Adv Server. How do I do that?
> BG
>
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at
> http://explorer.msn.com/intl.asp
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
