Trusted NT domain users have full access to 2K3 server shares

Discussion in 'Server Security' started by Mark, Jan 23, 2007.

  1. Mark

    Mark Guest

    Hello Everyone

    Trusted NT domain users have full access to 2K3 server shares

    The share permissions are set to everyone read/write and the following
    Groups have access at folder/file level

    Administrators (2K3DOMAIN\Administrators)
    Users (2K3DOMAIN\Users)

    I would have assumed I would need to add NTDOMAIN\Users to the list but no,
    they have access read/write access already?

    How can I stop the NT domain users from accessing a share without denying
    them in the security settings of each share/object

    Thanks in advanced
    Mark, Jan 23, 2007
    1. Advertisements

  2. Your subject says they have "full access" but your discussion
    states they have read/write. These are different.
    Your issue is without doubt in what is included as members
    of 2K3DOMAIN\Users (or some other group not mentioned)
    that has a grant. What out for Authenticated Users as it is
    pretty much everyone that has authenticated.
    Roger Abell [MVP], Jan 23, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.