Solved

Deny a group of users access to a server on the domain

Posted on 2011-09-19
4
390 Views
Last Modified: 2012-05-12
I have a particular group of users that I only want to access one server in my domain.  I currently have 12 servers I need to deny them access to.  I'm using server 2008 for AD but have a mix of 08's and 03's.  Whats the fastest way to do this?
0
Comment
Question by:ryanropp
4 Comments
 
LVL 34

Accepted Solution

by:
Paul MacDonald earned 250 total points
ID: 36562748
It depends on what you mean by "deny access".  Even if the users are members of the domain, they cannot, by default, just access anything on the network.  If you don't share a resource with them, they can't get to it.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 36563067
Awaiting further clarification as well... :-)
0
 
LVL 77

Assisted Solution

by:arnold
arnold earned 250 total points
ID: 36563245
You could control what systems they can access using the logon to settings within ADUC.
http://technet.microsoft.com/en-us/library/bb457115.aspx
The problem is that you already have the environment and you are now trying to implement a change.

A deny on a share will take precedence over an allow rule.

Using AD user account  logon to option is the quickest.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question