How to assign access right to a user for folder/file in active directory.

mohitume
mohitume used Ask the Experts™
on
I have 3 pcs. First 2003 DC GC everything, 2 clients 2000 and xp. I have created 2 users in active directory user200 and userxp. user2000 logs in to Win 2000 and userxp logs in to Win Xp. how to give access right of folder in xp to user2000. from active directory.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
In WinXP: Right-click on the folder and select the Security tab. Choose Add and either browse the AD (click on Advanced) or type the domain\username. Click OK and then choose what permissions you want to set.

Links:
http://www.microsoft.com/windowsxp/using/networking/security/permissions.mspx
http://technet.microsoft.com/en-us/library/bb727008.aspx
http://www.windowsecurity.com/articles/Understanding-Windows-NTFS-Permissions.html
Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012
Commented:
I would suggest setting up FileServer in your environment. You set up domain so it is better to manage data access on File Server. Then you have no problem if one of them shut down a PC :) data still will be accessible.

Create a share for them and add each user to folder's security tab wit modify(write/delete) or read&execute(only read and execute files) permissions.

Regards,
Krzysztof

Author

Commented:
No i want to do this by Server  2003 if i need to physically login in xp and then create share and add user/group then what is logic of centralized administration ? Is this only way to do required job.
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012

Commented:
OK, follow kmalte suggestion in his post.

Author

Commented:
Don't understand me idiot but i knew going to different pc create shares adding users and groups  all i wanted to know whether it is possible only from logging into 2003 please provide  solution if you know even now it is usefull
Krzysztof PytkoSenior Active Directory Engineer
Top Expert 2012

Commented:
nope. to be able sharing folder from pc, you need to lggging there and share resources. then you are able managing permissions over network (even from your 2003 server).

Of course, you can also use Computer Management console to join any other pc in your network (if yo have local administrative rights on it) and go to share node. You can set up new share from this place.

Krzysztof

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial