Re: folder access permissions

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 11/24/04 

Date: Tue, 23 Nov 2004 22:49:42 -0700

As you alter users' practices to use a domain account you will need
to reACL their resources for the new account. IOW, these are new,
different accounts so they need to get threaded to where they ought.
In a domain environment, definitions from the domain level can/should
flow down into the members. Definitions cannot flow the other way
(add member group into domain group does not fly). 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA,  MCSE W2k3+W2k+Nt4
"Darrell" <Darrell@discussions.microsoft.com> wrote in message 
news:D40D2E6D-4491-4BFA-91FF-420C4C973CB6@microsoft.com...
>I just moved a file server into our domain as a member server, hoping to 
>keep
> user accounts and permissions intact. However, users that log into the 
> domain
> cannot get at their folders unless I manually add their domain account to
> their folder. Users that aren't in the domain yet are okay. I guess this
> makes sense security wise, but is there a quicker way to do this? I tried
> adding the member server user group to the Domain Users but couldn't get 
> it
> to work.
>
> Any help is appreciated as users are starting to complain.
>
> Thanks,
> Darrell

Relevant Pages

  • Re: Login - Using Tempoary Profile Problem
    ... You can perform the test on one problematic client account. ... please run the Add User Wizard to create a new ... This newsgroup only focuses on SBS technical issues. ... >the 2003 member server. ...
    (microsoft.public.windows.server.sbs)
  • RE: Authentication question
    ... I added a local account to the member server ... I'm wondering if there's any way to have the member server "defer" to ... member server from the PDC based on a group membership or something. ...
    (microsoft.public.windows.server.active_directory)
  • what type of user should cluster run under on member server
    ... After demoting one of my nodes from DC to member server, the cluster ... account that the cluster service runs under... ... Domain account which is member of the Local Computers Administrators ...
    (microsoft.public.windows.server.clustering)
  • Re: Remote access to member server
    ... access the system he gets an account he is responsible for the actions of. ... The 'member server' is, according to the original post, also TS Apps mode. ... years we VPN'd to the SBS 2000 servers, then RDP to the ip of our ...
    (microsoft.public.windows.server.sbs)
  • RE: Authentication question
    ... force it to check the domain rather than locally first. ... "Mark Clark" wrote: ... I added a local account to the member server ... or some other way to have the member server look at the AD ...
    (microsoft.public.windows.server.active_directory)