I have two file servers, each Windows 2003 R2, and use DFS replication to keep the DFS shares in sync... I have a Windows Server 2003 R2 domain in a single domain forest. if that matters.
I have always shared folders to a group and maintained the members of those groups to allow specific access. I have considered this best practice. I now have two coworkers that insist on adding user objects rather than security groups directly to the file shares as well as specific folders under the file share. Other than a maintenance nightmare, is there really any reason for using security groups over user objects? Does it create more CPU overhead for example? Thanks in Advance! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
