Go Back   TechArena Community > Software > Operating Systems
Become a Member!
Forgot your username/password?
Tags Active Topics RSS Search Mark Forums Read

Reply
 
Thread Tools Search this Thread
  #1  
Old 12-10-2009
Member
 
Join Date: Jun 2009
Posts: 87
Problem connecting domain directory with global group

I have a legal problem on a directory. I created a global group named GG_XP in my area. Inside I added the computer named XP1. I applied this global group to a directory named "Only_my_XP" on my DC1. It is attached to a xcacls of directory "Only_my_XP".
BUILTINAdministrators (OI) (CI) F
DEMOGG_XP (OI) (CI) C
AUTHORITY NTSYSTEM (OI) (CI) F

It has attached description of the global group
net group GG_XP /domain
Group Name GG_XP
Members -------------------------------------------------------
XP1$ XP2$ XP3$

But when I browse the directory "Only_my_XP" from the computer XP1 with a domain user account, I'm denied access.

I do not understand. The user of premium domain is on the right of the computer. But the domain user can not deny the level of security. Please note that I am using Windows Server 2003.
Reply With Quote
  #2  
Old 12-10-2009
Member
 
Join Date: Aug 2008
Posts: 540
Re: Problem connecting domain directory with global group

Your group allows computer accounts XP1$ XP2$ XP3$ that connects to the directory? You do not use the computer account but your account area and you'll never have impersonalisation of a computer account. Viewing the effective permissions for your user on the rep.
Reply With Quote
  #3  
Old 12-10-2009
Member
 
Join Date: Jun 2009
Posts: 87
Re: Problem connecting domain directory with global group

My user has no right to the directory (I have given above a cacls rights), but the computer via a global group. So if I understand correctly, a computer has no interest in the directories or I'm wrong.

The problem is that I saw someone created GPO to the domain level and not filtered through a WMI but with a global group in which he entered machines ..
Only one problem is access denied to directory GUID.
Reply With Quote
  #4  
Old 12-10-2009
Member
 
Join Date: Aug 2008
Posts: 540
Re: Problem connecting domain directory with global group

If a computer can have rights to a rep but must use the account to connect to it (typically when using software running on this account there) but you're logged in with your user and you accede to your rep with account, not the machine account.

On the GPO so it has nothing to do with directory. You can filter the GPO with groups to prevent security they apply to certain machines, but it's different.
Reply With Quote
Reply

  TechArena Community > Software > Operating Systems
Tags: , ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "Problem connecting domain directory with global group"
Thread Thread Starter Forum Replies Last Post
Add domain user\group to local admin group problem Landon Active Directory 3 16-10-2009 09:30 PM
VB. List the userID from group (Domain Admins set as Primary group) epremyan karapet Software Development 1 12-10-2009 07:26 PM
Global Group or Universal Group aconti Active Directory 5 01-09-2009 10:09 AM
How to stop a group of users to login to active directory domain TechPK Operating Systems 2 01-05-2009 11:20 PM
How to export list of users from each global, domain, local group? Manik Active Directory 1 10-06-2005 07:52 AM


All times are GMT +5.5. The time now is 10:12 PM.