Re: Windows XP and Group Policy Preferences

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: "georgedavid@xxxxxxxxx" <georgedavid@xxxxxxxxx>
Date: Tue, 12 May 2009 15:32:26 -0700 (PDT)

For anyone else troubleshooting issues.
as part of audit request we were not allowed to have EVERYONE group on
any shares. as a result
the print$ share on our print server has only domain users group
added.

when using GPP with computer policy it uses machine account.
we added "Domain Computers" to the share and NTFS permissions with
read access. it works now.
.

References:
- Windows XP and Group Policy Preferences
  - From: georgedavid@xxxxxxxxx

Prev by Date: Re: GP Processing - IE Home Page
Next by Date: RE: GP Processing - IE Home Page
Previous by thread: Windows XP and Group Policy Preferences
Index(es):
- Date
- Thread

Relevant Pages

Re: removing user from domain users group doesnt help
... Instead create global groups that contains the users that you want to have access to each share and then grant those global groups permissions to the shares and do not include users/domain users/everyone/authenticated users in the access control list for share permissions. ... I have few shared folders on my w2k3 file server and most of them allow read access for the domain users group. ... I created a new group and put all these users onto the group and removed the domain users group from the "member of" property of these users. ...
(microsoft.public.windows.server.security)
Re: removing user from domain users group doesnt help
... user permissions to any shares and instead give permissions to the global groups you want to have access or give the global group deny permissions to the shares you don't want them to access or deny access this computer from the network user right for computers you don't want them to access shares on which can easily be managed via Group Policy. ... I have few shared folders on my w2k3 file server and most of them allow read access for the domain users group. ...
(microsoft.public.windows.server.security)
Re: removing user from domain users group doesnt help
... I do NOT recommend that you try to remove users from the domain users group ... as a strategy to manage access to shares or any other reason. ... control list for share permissions. ... I have few shared folders on my w2k3 file server and most of them allow ...
(microsoft.public.windows.server.security)