permissions on file and folders

[techspl1]

i have a domain controller at <location x> where i have my active directory running i have created my user and groups in the domain controller, there is a group named {abcusers} whaich has a, b, and c as users in that group. all the users connect to the domain controller at location x. i have a member server at <location y> where i have resource which has to be given access. the connection between two is over 2 mbps wan link the user workstations are at the location where the member server is.

i have to assign permissions wherby all the users authenticated at domain controller should be able to access resources on member server. i have a partition where data is stored d:\ which has share permissions for everyone local group. inside there is folder (xyz) where i have created seprate folders for user a, b , c the share permission on the folder is everyone and the folder permission for individual folders is full access to the respective users. now i want to do away with the everyone access at share level , and use the abcgroup instead of everyone. how do i go about. what happens to my access in case of link failure to the dc will i still be able to give my users access.. how do i go about this task....

thanks in advance for reading through this query ..

answers and or links to info are welcome

 

[anandgjha]

There is only one simple answer for your query &quot;no&quot;.if at all there is a link problem yup the user wont be able to access the domain controller.as far as a solution is concerned it depends on the local policy that you are following that you can have a backup dc on either of the side so that in case of link failover you use the local dc for authenticaiton and resource usage.

 

[GuyThomas]

You will probably find two tabs to control permissions. One called sharing, and one called Security.

I would control the users through the NTFS permissions on the security tab. Leave the share permission as everyone full control, then remove the NTFS permission full control and add your users or groups with Read or change permission.