Re: Bug in Security tab or my mistake?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Cannot be done. It is all or nothing for 'Permit', No deny.

--
Chuck Timon, Jr.
Microsoft Corporation
CCS Beta Engineer
This posting is provided "AS IS" with no
warranties, and confers no rights.
"FFLY" <FFLY@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9497B58B-CA2C-4243-BF78-7A7B5462A717@xxxxxxxxxxxxxxxx
>I am trying to deny one specific (domain) account full control to a
>cluster,
> using the 'security' tab on the cluster name in cluadmin. I have had no
> success in doing so. I can set the 'deny' permission without any problems,
> but it doesn't prevent that account of accessing and managing the cluster
> (using cluadmin.exe) whatsoever.
> I even tried to stop/start the cluster services on my 2 nodes, to no
> avail.
>
> For the sake of clarity I should add that this account happens to be a
> member of the local admins group. But why isn't the deny taking
> precedence?
>
> Regards


.

Relevant Pages

  • Re: Need to filter domain admin from GPO
    ... But think always about the part that a deny is the highest blocking you set and if you forget that you have set a deny or you are not in and someone else have to search for errors, it will be really heavy to find it. ... It's best practice to use a 2nd administrator account as your ... Block inheritance (I would have to move the domain admin from ... particular GPO using ACL deny. ...
    (microsoft.public.windows.group_policy)
  • Re: Web Server 2003 File Sharing
    ... > I've tried removing Deny Everyone, but this doesn't seem to help. ... > Administrator account name. ... > the new administrator credentials ... >>Can anyone give me any pointers as to what Local Security Policy ...
    (microsoft.public.windows.server.general)
  • Re: Three + Bonus and Fours in Pool 45, Pick 6 Lotto game with 2 Bonus integers
    ... posting here is to pull readers to your web site forum, ... Some of those people while not posting, ... Do you deny comparing yourself to Gail Howard and the phony Prof ...
    (rec.gambling.lottery)
  • Re: Three + Bonus and Fours in Pool 45, Pick 6 Lotto game with 2 Bonus integers
    ... posting here is to pull readers to your web site forum, ... Some of those people while not posting, ... Do you deny comparing yourself to Gail Howard and the phony Prof ...
    (rec.gambling.lottery)
  • Re: Wierd permissions on user accounts
    ... That said, as I mentioned earlier, your permissions are bad. ... *nobody* will be able to change password on the account. ... I have the following deny rules.. ...
    (microsoft.public.windows.server.active_directory)