NTFS Security based on COmputer Account

From: James Raaymakers MCSE 2000 (jamesraa@pacbell.net)
Date: 12/31/02


From: "James Raaymakers MCSE 2000" <jamesraa@pacbell.net>
Date: Tue, 31 Dec 2002 13:17:14 -0800


Permissions are user based not machine based. I don't know
how your network is set up, but I recommend you create a
domain user group, add the users domain accounts who will
have access and set permissions for that user group. Other
wise you can use IPSEC on the machine with the share and
set it to "Secure Server (Require Security)" then
configure the computers that you want to access the share
to respond and disable IPSEC on all others. Then this
computer will refuse connection from the computers with
IPSEC disabled. Note though, all computers that will be
communicating with this computer will need to have IPSEC
enabled to respond. This includes the DC, DHCP, DNS etc.
Hope this helps.

>-----Original Message-----
>Hi,
>I am trying to give NTFS permission to folders based on
>the Computer Account. e.g. - If for folder A only
Computer
>A and Domain Admins should be able to access. I am given
>the permission to this folder with Domain Admins and
>A$(computer account) as Read and also this folder I am
>able to see after accesing it's parent folder which is
>shared as read for Everyonoe.
>But when I access from A, it says permission denied. I am
>not logged in as Admin there, but I am logged in as a
>normal user who is not given any permission, but the
>Computer is given the permission.
>
>Can anyone tell me what the problem is.
>
>Sharath
>.
>



Relevant Pages

  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • Re: Network shares cannot connect
    ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • MCSA/MCSE Self-training book from MS PRESS for exam 70-215 incorrect on file permission questions?
    ... includes the AccountingDept folder, which contains documents specific to the ... accounting department. ... The Accounting group includes all members of the ... AccountingDept folder by granting Read permission to the Accounting group ...
    (microsoft.public.win2000.file_system)
  • Re: Network shares cannot connect
    ... User Name: SERVER$ ... Regarding the shares accessing problem, I suggest you try following steps ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
    (microsoft.public.windows.server.sbs)
  • Re: Practice Test with Wrong Answers?
    ... "The Modify permission does not include the Delete Subfolders and Files ... so permanent employees cannot delete files form the Progress ... When I try this out the modify permissions for the parent folder get ...
    (microsoft.public.cert.exam.mcsa)