Re: can I use GPO for remote folder management?

Roger,
1. if I will install TS in administrative mode. Is it only for
administrators or user that exist on server can log in under his local
profile?

2. > Instead, define a group and grant him a delegation on
> the membership of that group. Then you one time set
> that group to have the permissions you want him able
> to grant to others.
>
He is a member of R&D dep. group. And he suppose to assign permisions to R&D
Folder and subfolders. How to grant him a delegation on the membership?
Where to click :) ? Sorry.
If you don't mind I will ask you few more questions about sharing later.
I want to try all what you suggest above first.
Thanks.
Michael.

"Roger Abell" wrote:

> First, he is doing something wrong when attempting to
> alter the permissions. Obviously he has the ability, as
> he is destroying what is already there when he makes
> changes, so it is not an issue of his being able to do this
> as far as OS grants to him, but of how he is doing it.
> That is a user training issue.
>
> Second, you should not let him alter the permissions.
> Instead, define a group and grant him a delegation on
> the membership of that group. Then you one time set
> that group to have the permissions you want him able
> to grant to others.
>
> None of this is something that falls into the area of
> group policy.
>
> Finally . . .
> W2k3 does include an administrative mode install of
> terminal services that allows for two simultaneous
> connections. I would recommend that you do not give
> this access away to a non-savy, non-admin unless you
> know what you are getting into.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Michael A." <Michael A.@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:5CDD6D2D-D713-4D37-8CA8-5A23AA454C67@xxxxxxxxxxxxxxxx
> > Hi,
> > we have one stand alone 2003 server.
> > I need to enable user access to the folder X on server. He needs to change
> > other users rights to subfolders of X folder.
> >
> > The folder is shared. User1 has full share and NTFS permission to folder
> X.
> > A problem is that he can not assign rights remotely to other users. May be
> > because there is no AD. At this time I don't want to mess up with AD.
> Since
> > we have one AD on the subnet. When he clicks on subfolder he can add users
> to
> > subfolder but Windows alerts "that inherited permissions will be lost".
> > He did it few times. After that folder is unaccessible and I have to log
> in
> > locally to the server and reapply permissions...
> >
> > Now user1 asking me a terminal service access to the server.
> > He says that by default there are 2 free licenses. Is that true?
> > I cannot find any ifo about free TS licenses. What I found that it will
> work
> > 90 days. By the way can I buy 1 license? Or there is a minimum?
> >
> > May be there is an option for solving my problem through Group policy.
> >
> > How can I provide user rights for managing folder access remotely?
> >
> > Thanks.
> > Michael.
> >
> >
> >
> >
>
>
>
.

Relevant Pages

  • RE: Windows 2003 Server - Everyone Group
    ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
    (microsoft.public.win2000.networking)
  • Re: Office Docs wont Open? and BU Drive not Recognized?
    ... Create a new Folder: ... On the server share... ... SHARING tab | Permissions | Share Permissions | Group or User Names ... If I copy the document to the local Client, the document opens ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange Move Issues?
    ... I'm a bit confused on what permissions to assign for SBS, ... When you finish moving the databases, ... You can move the log files and database files to any folder that you want to ... Note Only assign permissions to the Server Operators group if the Exchange ...
    (microsoft.public.windows.server.sbs)
  • Re: An NT Security Gotcha that looks like a Jet Security issue
    ... >people remotely via Windows Terminal Server. ... >code when it was run by a user that didn't have full permissions on ... There's a top-level DATA folder, ... >ApplicantsDB and Quickbooks. ...
    (comp.databases.ms-access)
  • Re: DCOM Event ID 10015
    ... Grant the user permissions to start the COM component ... Run the MPSRPT_DirSvc.exe on the server box. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)