2
votes
2answers
49 views

How to bring a redirected user account back from the dead in Windows Server 2008 R2?

A user at the place where I work left the company, we deleted his account out of AD and then he came back...and now his redirected profile exists, but with the wrong permissions on the folder.. I ...
0
votes
1answer
303 views

Can browse sysvol but not netlogon with Samba 4.1.5-SerNet-RedHat-7.el6 on CentOS 6.5

I have three servers: a Win2003 box running as the first AD DC, a 64-bit CentOS 6.5 box running Samba 4.1.5 x64 in AD DC mode, and a 32-bit CentOS 6.5 box running the same version of everything but ...
0
votes
1answer
33 views

How can I grant different rights to a group of users based on the ownership of a file

[disclaimer : I'm not a sysadmin, I'm a programmer and I know very little on Windows Administration] I have a windows Server 2008 R2 machines that share a directory on C:\SDCN with several windows 7 ...
1
vote
2answers
58 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
68 views

Bizarre permission inheritance logic windows 2008

Could someone explain this bizarre behaviour? I manage a handful of servers connected to a much larger Active Directory network. All the Windows shares on our servers have a mixture of local account ...
1
vote
1answer
515 views

How to list all NTFS and share permissions associated with a user or security group?

We are doing some tidying up of Active Directory on our SBS 2003 domain controller. A number of security groups exist which I am 95% sure are redundant. I want to be 100% sure they are not used ...
1
vote
1answer
495 views

How to make IIS 7 application pool run under an AD account?

I have an internal company web application that needs read permissions on certain folders in our LAN. The permissions on these folders are controlled by our Active Directory server. Since by default ...
1
vote
1answer
96 views

How to give a user write permissions to a file whereas the group he is in is denied to write (in Active Directory)?

For example, I have a group Department A. Among other users, I have a user named Boss. I want to create a file that can be changed only by Boss, and be readonly for the other users from that group. I ...
0
votes
1answer
139 views

network share special permission - cant create directly on share must drag files over

I am attempting to take away delete privileges on a test network share but still allow for folder and file creation. My users tend to drag directories inside directories and cloud based backups get ...
2
votes
1answer
242 views

Restricting access to Share using both an AD user using a specific Computer

The Environment: One AD domain that is not managed by local admins (can’t edit, can’t add GPO, etc.) Users have accounts here. Call this AD alpha This AD Alpha has a trust to a local AD domain (Call ...
0
votes
2answers
82 views

How to protect files from been access outside the network?

i am trying to find a solution regarding an issue that i am facing, we have a small server that is only used for sharing company files, their are some files that are created on employees company ...
4
votes
4answers
6k views

Allow user to change permissions on a folder, but not remove/change Domain Admins access?

We're a small college, and I have one file share for an athletics team that I want to turn over to the coach. We don't track or have a group for athletic team members in Active Directory, and the ...
1
vote
1answer
6k views

Is it possible to hide folders/subfolders from users based on permissions?

Having a Windows Server 2008 R2 that has a share with lots of nested folders, I want to be able to only show certain folders to certain AD users/AD user groups. Is it possible to configure the ...
1
vote
1answer
206 views

Limit AD group access to share files but not folders

I have an AD security group of accounts that I need to have access to some folders. They need to be able to traverse these folders into sub-folders, where they will be writing files. But these ...
2
votes
2answers
2k views

creating security groups from scratch - best practices

I need to create security groups in AD. I can identify the groups that I need, let's say they are: Management,Finance,Sales & Engineering. And I can identify the resources that each group requires ...
3
votes
3answers
922 views

How can I programmatically change file permissions from one AD domain user to a separate AD domain user?

We are in a colocated RackSpace facility in San Antonio, with an active directory named "SAT". We are being moved to their Dallas/Ft. Worth facility, with an active directory named "DFW". These ...
1
vote
3answers
4k views

How can give group in active directory folder access by group policy

I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have ...
1
vote
3answers
508 views

Copying over NTFS ACL's from one offline server to another server

We have two machines on the same domain: Machine A (Windows 2003) and Machine B (Windows 2003). Both have a set of files that are identical and have been kept identical by a scheduled process. ...
6
votes
3answers
8k views

Can Samba support full Windows-ACLs?

I've set up a Samba 3 host with AD integration and an ACL enabled filesystem. Using a windows client I can set users and groups permissions. Up to now, Samba just maps to POSIX ACL's rwx permissions, ...
2
votes
2answers
332 views

Allowing user read/write access to a folder during a particular time period - Windows Server

I'm looking for a safe and secure way to grant a user access to a particular folder during a strict period of time. For this example let's say, from 8:00AM to 8:30AM, Monday to Friday. My reasoning ...
1
vote
2answers
13k views

How do I find out how an Active Directory group is being used?

Here's the scenario. I have an Windows 2003 Active Directory security group that was created in 2007, and no one remembers what it is for. Is is possible to find out what permissions in our AD ...