two types of permissions
resource [files etc]
ntfs [users gpo]
I seem to remember MS best practice is to give everyone account access to resource, and use group policy to control access
so that you are only having to consider ONE thread of permissions, not both
because there are things to remember when altering permissions
RSoP [Resultant Set of Policy] tool can quickly determine just what your policies have actually allowed
I posted a thread a little while back, will link later
linking http://antionline.com/showthread.php...477#post934477
but there are other reasons TO remove everyone group
and it isn't just because you are not on a domain
starting to ramble now
better stop![]()





Reply With Quote