Re: Using computer names in NTFS folder permissions

Danny,
Perhaps if you think of it this way.
NTFS access check is just looking through a list of SIDs and
comparing to SIDs in the token of the process. Whether a
SID (aka a principal) represents any of the categories Paul
has listed is not checked.
Roger

"Danny Sanders" <Danny.Sanders@xxxxxxxxxxxxxxxxx> wrote in message
news:eJXiQDcLGHA.3960@xxxxxxxxxxxxxxxxxxxxxxx
This is not true. NTFS permissions work for user, group, and computer
accounts. Which permissions apply depend on the security context of the
process that is being used to access the file or folder.

Learn something new every day. I was not aware you could use NTFS
permissions to restrict a computers access to a file or folder.

Of course I've never tried it either.



DDS
"Paul Adare" <padare@xxxxxxxxxxx> wrote in message
news:MPG.1e557a9ed1c2286c98a050@xxxxxxxxxxxxxxxxxxxxxxx
In article <#zVgitbLGHA.2320@xxxxxxxxxxxxxxxxxxxx>, in the
microsoft.public.win2000.security news group, Danny Sanders
<Danny.Sanders@xxxxxxxxxxxxxxxxx> says...

NTFS permissions work on user accounts not computer objects.


This is not true. NTFS permissions work for user, group, and computer
accounts. Which permissions apply depend on the security context of the
process that is being used to access the file or folder.

--
Paul Adare - MVP Virtual Machines
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain




.

Relevant Pages

  • Re: Using computer names in NTFS folder permissions
    ... microsoft.public.win2000.security news group, Adam ... You can't do what you're trying to do with NTFS or share permissions as ... It all began with Adam. ...
    (microsoft.public.win2000.security)
  • Re: FTP control
    ... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
    (microsoft.public.win2000.security)
  • RE: Any way to remove ADMIN$ only?
    ... Mixing the share permissions and the NTFS permissions generally cause ... which means more groups/people access the same shares. ... Along comes another admin that creates a share at a higher level in the ...
    (Focus-Microsoft)
  • Re: W2k and Front Page Security
    ... >> up now using subweb and setting permissions throgh ... >> with NTFS permissions contolling folders.When I set ... >FrontPage managed content areas you do really need to ... >authorship of every groupX subweb in addition ...
    (microsoft.public.win2000.security)
  • Re: Removing "File and Folder tasks"
    ... You can put the computers you want to enforce the NTFS permissions on into ... create a Group Policy to enforce the NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
    (microsoft.public.windowsxp.security_admin)