up vote 1 down vote favorite
share [g+] share [fb]

Here's what I want to happen:

  • User A logged into computer in the "Laptops" group: access denied to file share
  • The same User A logged into computer in the "Terminal Servers" group: access granted to file share

This is an AD domain at the 2003 functional level, with a 2003 DC and file server. I know it's kind of weak security (i.e. they can sign into the TS and email it to themselves), but it will only be a supplement to additional access control rules. Is this possible?

link|improve this question
100% accept rate
1  
Hmmm... I don't think that's possible. File/Folder access isn't predicated/determined by which computer a user is logged on to, it's determined by the ACE's on the ACL of the resource being secured (files and folders), which are granted to users and groups. – joeqwerty Jul 22 '11 at 14:40
I figured. Oh well, can't hurt to ask. If you want to make it an answer I'll accept. – BenGC Jul 22 '11 at 14:59
feedback

1 Answer

up vote 3 down vote accepted

Hmmm... I don't think that's possible. File/Folder access isn't predicated/determined by which computer a user is logged on to, it's determined by the ACE's on the ACL of the resource being secured (files and folders), which are granted to users and groups

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.