Re: Granting file access permissions



OK.

--
Miha Pihler, MCSA, MCSE, MCT, CISSP
Microsoft MVP - Windows Security

"MarshMan" <MarshMan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D0112DFB-F1D0-4509-8DBC-8CB4F952DD96@xxxxxxxxxxxxxxxx
> sorry for doubting you but surely you must be wrong. What kind of
> directory
> is it that doesn't allow one to grant file access permissions to an OU and
> have those permissions flow down to all child OUs? I must continue this
> search as I can't believe thist to be true.
>
> "Miha Pihler [MVP]" wrote:
>
>> You can grant permissions based on OUs. You can only grant permissions
>> based
>> on Groups (and less useful directly to users).
>>
>> Now what you can do is create Security group and put all users from OU to
>> this group. Now go to folder and give permissions to the group that you
>> just
>> created.
>>
>> On OU level you can set other things -- e.g. computer and user
>> configuration. This way you can lock down the computers and limit what
>> users
>> can and can't do.
>>
>> I hope this helps,
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "MarshMan" <MarshMan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:C2118BCD-6A79-4E80-ADC7-7FA7C2669A1C@xxxxxxxxxxxxxxxx
>> > I'm coming from NDS to AD and I'm struggling a bit with granting file
>> > access
>> > permissions. My AD OU design is geographical in nature and I want to
>> > grant
>> > file access to all users in an OU, however I can't seem to locate OUs
>> > anywhere inside the Security tabs. Can anyone assist?
>>
>>
>>


.



Relevant Pages

  • Re: Do not have permission to view or edit permission settings for a folder
    ... > "Roger Abell" wrote in message ... >> you would like it to set new permissions also, ... >> Microsoft MVP (Windows Security) ...
    (microsoft.public.security)
  • Re: IIS User Right
    ... Microsoft MVP - Windows Security ... IIS will always honor the NTFS permissions. ... Administrators if you want to allow them access to the files). ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to view/manage server roles (windows 2003 server)
    ... >> mshta.exe file of the server where the management ... >> Microsoft MVP (Windows Security) ... >>> permissions and the only group that can access it is EVERYONE but the ...
    (microsoft.public.security)
  • Re: CreateFile() returns ERROR_ACCESS_DENIED to the user
    ... grant permissions for power users on the device driver and then do a ... relogon with power user or there is some other place where the ... permissions can be granted? ... users cannot grant permissions to themselves, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Assign special ipaddresses to a group
    ... There are quite a few firewalls out there that support groups in different ... Microsoft MVP - Windows Security ... if you want to make this script work it would have to be a logon script ...
    (microsoft.public.windows.server.general)