So I deny permissions at the sys vol level? Yes there are multiple servers in the network. This one is accounting related. ON NT you can simply deny access to the shares. I am thinking I can change the permissions of the sysvol and remove the everyone group, adding the users I want to grant access. Wouldn't this achieve the same thing?
I would have thought you have to look at your login script first to ensure that there are no drive mapping pointing to this server. If there is, change your login script accordingly.
Standard users should not attach to this server unless there is something somewhere requesting a connection (such as a drive mapping).
-----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------
But they could browse and connect to the server. Unless specific permissions were taken away. That's my thinking. You are right I should check the login script, especially if I make perms changes.
NO, you are exactly right. You can remove the everyone group and only add specific users. However, you probably want to restrict access to the drive that the user data resides on. The SYS colume is kind of important because when a user authenticates, there are specific NETWARE files in the SYS:SYSTEM and other SYS: directories that users need to have access to.
Just remember that unlike Microsoft, Novell is usually locked down so that users just don't have rights. You also have to remember that rights flow down the directory structure so there is a chance that the 'Everyone' may be getting their rights from a higher point in the NDS tree. Its not that hard to figure out, just check the rights to files and directories for the everyone group and you can confirm what is coming from where.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.