Re: Dialup Security Group
From: Danny Sanders (Danny.Sanders@cpcmed.org)
Date: 11/13/02
- Next message: Karl Levinson [x y] mvp: "Re: How do I abort a logon script"
- Previous message: Pete Ruby: "IIS 5 - Cannot access web files"
- In reply to: Greg: "Re: Dialup Security Group"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Danny Sanders" <Danny.Sanders@cpcmed.org> Date: Wed, 13 Nov 2002 15:52:45 -0700
On second thought you may be right. I have never had the need to use this
group in this way.
See this link:
http://support.microsoft.com/default.aspx?scid=kb;en-us;292781
I would assume people who VPN in to the network would be entered into this
group, not sure.
According to that article what you are trying should work. Unless the OS
actually does make a distinction between dialup and VPN. I don't know for
sure.
I agree that in theory a VPN should be added to this group, I just can't say
for sure that is what actually happens.
DDS
"Greg" <viahedj@merrick.com> wrote in message
news:72c701c28b61$afdcffe0$3bef2ecf@TKMSFTNGXA10...
> I thought the DIALUP security group is a group that
> controls membership based on what you are doing on the
> network. As in, when you dial up (or go through R&R Remote
> Access) then you automatically become a member of this
> group. Just like Authenticated User and Creator Owner.
> Here is what I found on ms support as an explanation of
> this group.
>
> SID: S-1-5-1
> Name: Dialup
> Description: A group that includes all users who have
> logged on through a dial-up connection. Membership is
> controlled by the operating system.
>
> So in theory a VPN user becomes a member of this group,
> therefore can be denied access when the group is added to
> the permissions of the folder.
>
> Am I completely off base here???
>
>
> >-----Original Message-----
> >I don't think this is possible. Windows will not deny
> access to a folder or
> >give access to a folder based on how you access the
> network.
> >
> >hth
> >DDS W 2k MVP MCSE
> >
> >"Greg" <viahedj@merrick.com> wrote in message
> >news:f6cd01c28b56$e9357c00$37ef2ecf@TKMSFTNGXA13...
> >> Bascially I want to protect a folder in a way that
> >> prevents Dial-in (VPN or Dial-in) users from accessing
> the
> >> data when they are VPN'd or Dialed in. However when the
> >> same user is on the local network (not dialed in) they
> >> should be able to access the data folder. I thought that
> >> the DIALUP special security group is supposed to take
> care
> >> of this. I put Deny access to the DIALUP group on a
> folder
> >> but when dialed in I could still access this folder. Am
> I
> >> doing something out of the ordinary or is there another
> >> solution to this??? Assume the Everyone group has Full
> >> access to the same data folder.
> >>
> >> We have VPN and Dialup capabilites all going to a
> Windows
> >> 2k server with the Routing and Remote access policy set
> to
> >> only allow a certain group (VPN Access) to dial in. All
> >> users are set to use Remote Access Policy and the test
> >> user is in the VPN Access group. The default Remote
> Access
> >> policy has been deleted. This is a Native 2k domain.
> >> Basically I can VPN just fine but I am wanting to get
> >> denied access to the data folder when using VPN and not
> >> denied when logged in at the office.
> >>
> >> Any help would be appreciated.
> >> Greg
> >
> >
> >.
> >
- Next message: Karl Levinson [x y] mvp: "Re: How do I abort a logon script"
- Previous message: Pete Ruby: "IIS 5 - Cannot access web files"
- In reply to: Greg: "Re: Dialup Security Group"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
