Re: Read-Only Access to the entire server - everything , not just the Files & Folders

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 10/24/05 

Date: Mon, 24 Oct 2005 07:26:59 -0700

Cannot be accomplished.
Ask your senior to specific to what they should have access and
in what way (remote tools/shares, local login, remote desktop, etc.)
If your senior "grumps" about the looseness/limitations of Windows
that it cannot do this, then ask them to do it with any Unix, where
also it cannot be done as stated by yourself.

"Norman" <NormanN@hotmail.com> wrote in message
news:eGSHeID2FHA.2964@TK2MSFTNGP09.phx.gbl...
> Hi,
>
> My senior instructed me to give Read-only access to a small group of
> people on one server. However, this access would include "everything" on
> that server , ie, not just the read-only permission on file and folders ,
> but even the OS and system level applications and properties : eventlog,
> registry , IIS ,system properties, network properties , control panel
> ......EXCEPT they cannot change it.The server is a domain server running
> W2k3 SP1.
>
> Is there anyway to achieve this requirement ? I don't think any built-in
> groups can do that . Could this be done via GPO ?
>
> Please help !
>
> Norman
>