Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Here's what I want to happen:

  • User A logged into computer in the "Laptops" group: access denied to file share
  • The same User A logged into computer in the "Terminal Servers" group: access granted to file share

This is an AD domain at the 2003 functional level, with a 2003 DC and file server. I know it's kind of weak security (i.e. they can sign into the TS and email it to themselves), but it will only be a supplement to additional access control rules. Is this possible?

share|improve this question
1  
Hmmm... I don't think that's possible. File/Folder access isn't predicated/determined by which computer a user is logged on to, it's determined by the ACE's on the ACL of the resource being secured (files and folders), which are granted to users and groups. –  joeqwerty Jul 22 '11 at 14:40
    
I figured. Oh well, can't hurt to ask. If you want to make it an answer I'll accept. –  BenGC Jul 22 '11 at 14:59
add comment

1 Answer

up vote 3 down vote accepted

Hmmm... I don't think that's possible. File/Folder access isn't predicated/determined by which computer a user is logged on to, it's determined by the ACE's on the ACL of the resource being secured (files and folders), which are granted to users and groups

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.