Restrict network access to certain groups/users

[Anupnellip]

hii ,
I have a windows 2000 server with active directory . I want to deny them rights to all the network shares . I don’t want to go to each share and remove access . Is there any easier way to do it .
These r remote users and I don’t want them to browse the network and access the shares with everyone permission

Thanks

Anup

 

[Gizmo2003]

Do you have any shares that only have everyone set for the rights? You can cause yourself major headaches by removing the everyone group and then finding out you have no access.

To change access rights whole-scale, you can look at using cacls.exe at the command prompt, which is part of W2K. I would give full access to the system (to allow local access) and then the rights you wish to the everyone group (or any other for that matter....say authenticated users?). Here is a link to help you with the syntax:

http://www.microsoft.com/windows2000/en/server/help/cacls.htm

Hope this helps!

Gizmo