Permissions help

From: MattyBhoy (MattyBhoy_at_discussions.microsoft.com)
Date: 11/16/04 

Date: Tue, 16 Nov 2004 14:06:09 -0800

I am experimenting with NTFS permissions at home. My setup is as follows,
Windows Server 2003 and Windows XP Pro with SP2 as my client.
In Active Directory, i created a number of users and set up the permissions
to allow some users to print and other users no access to the printer. All
users are in the same OU. The allowed users were added to a global group,
then the global group was added to a Domain Local Group, i then set up the
permissions on the printer itself to add the domain local group. This worked
fine. The user that was not allowed to print, and was not added to the above
groups could still print from the client. I checked the permisssions of the
printer and checked that i had removed the Everyone group, i also went back
and removed the Creator Owner which left the Built Admin groups and the above
Domain local group which i manually added.
I cannot understand this, can anyone explain where i have went wrong?

Relevant Pages

  • Re: Global Group
    ... global groups to local groups. ... > global groups from each domain to a universal group and assign the> permissions to the universal group. ... Microsoft seem to have changed their> mind about the A-G-DL-P permissions model and don't recommend you assign> permissions directly to a domain local group. ...
    (microsoft.public.win2000.active_directory)
  • RE: ntfs permissions and AD restore password
    ... I seem to be stuck which way to play the changes to the permissions after I ... If I simply change the domain local group to become a universal groups then ... -add the User Accounts to Global Groups ...
    (microsoft.public.windows.server.active_directory)
  • Re: revoke change permissions?
    ... You can't use the Effective Permissions as the end all of the configuration. ... It sounds like you are correct in setting up Deny to Change Permissions to ... > I have a shared folder on a Windows 2003 server, ... > The domain local group has been given full control minus Change ...
    (microsoft.public.windows.server.security)
  • Global Scope
    ... Local, Global and Universal Groups. ... it the required permissions on the file shares. ... group to the Domain Local group results in all 20 users inheriting the ...
    (microsoft.public.cert.exam.mcse)
  • Re: Windows 2003 Server R1 vs R2 ? - Why not buy R1 ?
    ... Since we are small and just want to setup groups, client, and folder ... permissions... ... R1 is just the normal windows server 2003 in his different versions, ...
    (microsoft.public.windows.server.setup)