Re: can I use GPO for remote folder management?

First, he is doing something wrong when attempting to
alter the permissions. Obviously he has the ability, as
he is destroying what is already there when he makes
changes, so it is not an issue of his being able to do this
as far as OS grants to him, but of how he is doing it.
That is a user training issue.

Second, you should not let him alter the permissions.
Instead, define a group and grant him a delegation on
the membership of that group. Then you one time set
that group to have the permissions you want him able
to grant to others.

None of this is something that falls into the area of
group policy.

Finally . . .
W2k3 does include an administrative mode install of
terminal services that allows for two simultaneous
connections. I would recommend that you do not give
this access away to a non-savy, non-admin unless you
know what you are getting into.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Michael A." <Michael A.@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5CDD6D2D-D713-4D37-8CA8-5A23AA454C67@xxxxxxxxxxxxxxxx
> Hi,
> we have one stand alone 2003 server.
> I need to enable user access to the folder X on server. He needs to change
> other users rights to subfolders of X folder.
>
> The folder is shared. User1 has full share and NTFS permission to folder
X.
> A problem is that he can not assign rights remotely to other users. May be
> because there is no AD. At this time I don't want to mess up with AD.
Since
> we have one AD on the subnet. When he clicks on subfolder he can add users
to
> subfolder but Windows alerts "that inherited permissions will be lost".
> He did it few times. After that folder is unaccessible and I have to log
in
> locally to the server and reapply permissions...
>
> Now user1 asking me a terminal service access to the server.
> He says that by default there are 2 free licenses. Is that true?
> I cannot find any ifo about free TS licenses. What I found that it will
work
> 90 days. By the way can I buy 1 license? Or there is a minimum?
>
> May be there is an option for solving my problem through Group policy.
>
> How can I provide user rights for managing folder access remotely?
>
> Thanks.
> Michael.
>
>
>
>


.

Relevant Pages

  • RE: Windows 2003 Server - Everyone Group
    ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
    (microsoft.public.win2000.networking)
  • Re: Office Docs wont Open? and BU Drive not Recognized?
    ... Create a new Folder: ... On the server share... ... SHARING tab | Permissions | Share Permissions | Group or User Names ... If I copy the document to the local Client, the document opens ...
    (microsoft.public.windows.server.sbs)
  • Re: An NT Security Gotcha that looks like a Jet Security issue
    ... >people remotely via Windows Terminal Server. ... >code when it was run by a user that didn't have full permissions on ... There's a top-level DATA folder, ... >ApplicantsDB and Quickbooks. ...
    (comp.databases.ms-access)
  • Re: Exchange Move Issues?
    ... I'm a bit confused on what permissions to assign for SBS, ... When you finish moving the databases, ... You can move the log files and database files to any folder that you want to ... Note Only assign permissions to the Server Operators group if the Exchange ...
    (microsoft.public.windows.server.sbs)
  • Re: MS - Access Issues
    ... I don't see anything anywhere for NTFS folder permissions. ... Nor can it find the domain server. ... checked to bypass proxy server for local addresses. ...
    (microsoft.public.windows.server.sbs)