Re: 2000 Advanced server

From: Michael Eisenhart (a-miche@microsoft.com)
Date: 06/11/02 

From: "Michael Eisenhart" <a-miche@microsoft.com>
Date: Tue, 11 Jun 2002 11:10:40 -0700

Svyatoslav is correct; it is more practical to assign permissions rather
that obscure the resources
in the network neighborhood. In adition to that another option would be to
seperate departments into OUs and apply a GPO that would restrict access to
other Depts. If you are unfamiliar with how to do this I will send some
articles on OUs and GPOs.

GPOs
http://www.microsoft.com/WINDOWS2000/techinfo/planning/management/groupsteps
.asp

OU planning
http://www.microsoft.com/WINDOWS2000/techinfo/reskit/en/Deploy/dgbd_ads_dwvv
.htm 

--
Michael Eisenhart
Microsoft Support Professional
Get Secure!! www.microsoft.com/security
"Ravi.L.R" <lrravi@hotmail.com> wrote in message
news:d8b101c21135$77dd0eb0$39ef2ecf@TKMSFTNGXA08...
> To,
> Dear Microsoft,
> I am working as an System Administrator where we have
> Three Servers (Windows 2000 Advanced Server)one is for web
> server, the other is Exchange 2000 and the other is
> Application server.we have 40 clients pc's running windows
> 2000 proffessional and shortly it will be upgradable to
> 100 nodes.
>
> Present scenario is :
> 1. we have 10 departmaents and 5 users in each department
> presently and it may exandable up to 10 users.
>
> 2. we have created 10 groups pertaining to each department.
>
> 3. Now we have to restrict the users of one group meddling
> or interacting with the other group.if any group a member
> logs in to any pc in my domain he should see only their
> group members in the "my network places".
>
> Is it possible restrict between groups,Kindly revert back
> to me to with the inputs to achive this goal.
>
> Thanking you,and waiting for ur mail asap,
> Regard's
> Ravi.LR

Relevant Pages

  • Re: Security Permissions Question
    ... > How can you restrict access to an object based on computer, ... affect how the GPOs are applied to the computers to which they are ... is the only one checked for permissions. ... Accelerated MCSE ...
    (microsoft.public.windows.server.active_directory)
  • Re: ad for hosting env
    ... > What I am trying to accomplish is to restrict what computers of one OU can ... > want them to see each other's servers in network neighborhood. ... IF the machines are on separate subnets from the clients. ... server, defeat full replication, and then have clients point ...
    (microsoft.public.win2000.active_directory)
  • ad for hosting env
    ... The responses I recieved in previous posts ... explained how to restrict active directory browsing, ... We host web servers for several business units in our company, ... want them to see each other's servers in network neighborhood. ...
    (microsoft.public.win2000.active_directory)