Here's what I want to happen:
- User A logged into computer in the "Laptops" group: access denied to file share
- The same User A logged into computer in the "Terminal Servers" group: access granted to file share
This is an AD domain at the 2003 functional level, with a 2003 DC and file server. I know it's kind of weak security (i.e. they can sign into the TS and email it to themselves), but it will only be a supplement to additional access control rules. Is this possible?