Re: Best practice for local folder security
- From: "AllenM" <noreply@xxxxxxxxxxx>
- Date: Tue, 15 Apr 2008 10:45:22 -0700
OK if it is information to obtain regarding what they would be asking you on
cert test then you are best to go with sing local groups and populating them
with domain global or unicersal groups.
What I mean by "Plus it keeps the folder security clean so you don't see all
those SID's and accounts unknown remnants when you view NTFS folder
permissions." Let's say you have a domain group applied to a folder on a
local server NTFS permissions. What happens when you "delete" this group
from AD? Go back and look at the folders NTFS permissions and you will see
what I mean. The group no longer exists so it cannot be resolved and you end
up with those SID remnents. Now if you used local groups populated with
domain global groups and you delete that global group you see no garbage.
"RichGK" <RichGK@xxxxxxxxxxxxx> wrote in message
news:ae6ebc36-9705-46bc-a407-ef3ab53472e4@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On 14 Apr, 18:51, "AllenM" <nore...@xxxxxxxxxxx> wrote:
That's why he is the manager. He is correct. This does stem back from the
NT
best practices days however it still applies. Why? First of all and most
importantly is centralized administration. All administration can be dome
from any AD server. Plus it keeps the folder security clean so you don't
see
all those SID's and accounts unknown remnants when you view NTFS folder
permissions.
Surely you only see SIDs in an ACL if a domain controller can't be
contacted? Also, can you explain what you mean by all administration
can be done from any AD server? As it looks to me that this also
applies to the other method (especially if you are using remote
desktop).
I'm not arguing BTW, just want to understand this as I'm studying for
the MCSA.
.
- References:
- Best practice for local folder security
- From: RichGK
- Re: Best practice for local folder security
- From: AllenM
- Re: Best practice for local folder security
- From: RichGK
- Best practice for local folder security
- Prev by Date: Re: System event notification service and SCW
- Next by Date: Re: Roaming Profile / Folder Redirection Conflict
- Previous by thread: Re: Best practice for local folder security
- Next by thread: Session Issue
- Index(es):
Relevant Pages
|
