Re: Creating users

From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 01/23/05


Date: Sun, 23 Jan 2005 09:14:26 -0700

jccll wrote:
> I am setting up local users on a w2k server for file sharing purposes in a
> peer-to-peer network. When I create a new user the user is automatically
> created in the local Users group. When I add the user to another group to
> give more permissions such as Administrator or Power User the user remains in
> the Users group as well. My question is ....Is it ok for a user to be a
> member of multiple groups or should I remove membership until the user is
> only part of one group? I have not run into any problems but I would like to
> have it setup properly. Thanks in advance for any help.

        There's no problem created by assigning a to multiple groups. In fact,
that's the normal procedure. Permissions to individual shares are
assigned to specific groups, and then users are added to, or removed
from, only those groups necessary to grant them the access needed,
without having to grant them access to everything.

        I should point out, however, that granting anyone but the Network
Administrator admin permissions to a server is normally very unwise.
Are the users you're adding to this group qualified and trustworthy?

-- 
Bruce Chambers
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on having 
both at once. - RAH


Relevant Pages

  • Re: DCOM Event ID 10015
    ... Grant the user permissions to start the COM component ... Run the MPSRPT_DirSvc.exe on the server box. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Access to Server
    ... grant the user allow permission to the share folder, ... >Thread-Topic: Remote Access to Server ... I will give the VPN option ... Grant permissions to the user or group ...
    (microsoft.public.windows.server.sbs)
  • Re: can I use GPO for remote folder management?
    ... > that group to have the permissions you want him able ... > to grant to others. ... Folder and subfolders. ... >> we have one stand alone 2003 server. ...
    (microsoft.public.win2000.group_policy)
  • Re: Windows Form Socket Permission
    ... I was stupidly setting the permissions on the server, ... the control is to be ... security object to grant code permssions. ... This means that by default, the enterprise level can only restrict permissions, not grant new ones. ...
    (microsoft.public.dotnet.security)
  • Re: Security change takes effect only locally, not on server
    ... >> My security mdw is on ther server to avoid having to re-link tables ... >> settings - Added a new user group and permissions. ... >> settings without having to re-link all local users. ...
    (microsoft.public.access.security)