Solved

Is this explicit permission possible?

Posted on 2015-02-18
2
56 Views
Last Modified: 2015-02-18
Hello all,

My company has 7 citrix servers. We have users that get corrupted profiles because of a sync issue.
To fix this we would need to log on to the servers and remove the profile or rename the profile to ***.old.

Problem is only the Sys Admin and Jr Sys Admin have access to the servers. Help desk are the ones that are getting the call. The server requires a login. The Sys Admin and Jr Sys Admin all have domain accounts that can log into any server. We don't want to give Help Desk that access. I know that I will need to setup a local account.

My company is on board with a LEAN process. I was wondering if it was possible to give HelpDesk users access to the server's C Drive.

Can I give access to them to the C Drive\Users Folder and not access to remote into the server? [Example have them type the path to the C Drive (\\cserver01\c$\users). I know it will prompt them for a login and I can make a HelpDesk login.]

Is it possible to allow them access to just the Users folder? [Only allow them to stay in the user folder and no where else]

Is it also possible to reject their login if they try to remote into the server?

I know it may not be possible but just thought I'd ask to see if anyone has come across something like this.


Thanks!
0
Comment
Question by:xouvang
2 Comments
 
LVL 13

Accepted Solution

by:
Norm Dickinson earned 500 total points
ID: 40617574
You should be able to create a new share on that folder and explicitly allow access to a particular group, then assign the help desk to that group.
0
 

Author Comment

by:xouvang
ID: 40617712
Thanks! That's what I did and it's doing what I want it to do
0

Featured Post

Are your corporate email signatures appalling?

Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now