I understand the concept of AGDLP for domain permissions but is there any
benefit or issue with using the same DL groups when apply local permissions?
For example I have a Group called G-HR which is a member of DL-HR and I need
to make G-HR group local administrator permissions on a machine - should I
use DL-HR or G-HR? Any difference?
Re: Permissions - local ... This is probably going to start an argument but I have never thought that AGDLP or UGLy or whatever people want to call it was ever any good for a mechanism for assigning permissions UNLESS you were trying to implement some sort of role based scheme and even then I dislike it because the person who is responsible for the resource security is getting too far from the management of the security. ... For example I have a Group called G-HR which is a member of DL-HR and I need to make G-HR group local administrator permissions on a machine - should I use DL-HR or G-HR? ... (microsoft.public.windows.server.security)
Re: Sharing Tab vs. Security Tab ... One more thing to remember about combining share and local permissions: a combination of them applies where the most restrictive takes precedence. ... For example, if you give Full Control permission on the local level and Read permission on the share, the result for someone accessing it over the network will be Read access. ... (microsoft.public.windows.server.general)
RE: 0X8004010F Downloading OAB ERROR ... you have this virtual server selected for the web distribution of this OAB? ... What permissions define access - I have ... Permissions are local permissions only - Administrators ...Administrators, Authenticated Users, then Exchange and System ... (microsoft.public.exchange.admin)
