Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Computer Membership Of A Group

Status
Not open for further replies.

Skittle

ISP
Sep 10, 2002
1,528
US
I'm a little confused about Computer membership in a group.
I am unable to test out my understanding of this with the limited hardware resources currently available to me so hopefully somebody can help me out:-

User accounts are members of groups for accumulated permissions on network resources. A computer can also be part of a group and can also be assigned permissions for network resources.

Does this mean that you could grant a user authority to a file share via one group and deny the user's specific computer access to a file share via another group? This would have the net effect that the user could not use the file share if he logged on to the specific computer in the second group.



Dazed and confused
(N+, MCAD .NET)
 
In theory the PC group deny permission should work as a deny permission always overrides the allow permissions. Generally you will find that all the PCs on your network are members of domain computers group and you would need to create an additional group. I would only normally have to give groups of pcs access to a folder if it was running a script or an executable within that folder and only if it needs to be run eg when a computer starts up or closes down. From my own experience I tend to keep my groups simple by sticking to groups of users and placing restrictions on the PCs through group policy as too many groups can create a bit of a mess.
 
Your theory is correct, AFAIK. The only time I typically grant permissions to computers is for application deployment via GPO.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top