AD question



Mark
07-09-2005, 10:53 PM
Running Windows 2003 network....our groups were working fine. All of a
sudden, all users have permission to see all of the shares (ie. quality has
permission to see all of accounting). No changes were made on our OU.
Appreciate any help on this matter?

Lanwench [MVP - Exchange]
07-09-2005, 10:53 PM
In news:067C2005-FC92-4001-8C28-6D9C7513BF9F@microsoft.com,
Mark <Mark@discussions.microsoft.com> typed:
> Running Windows 2003 network....our groups were working fine. All of
> a sudden, all users have permission to see all of the shares (ie.
> quality has permission to see all of accounting). No changes were
> made on our OU. Appreciate any help on this matter?

Seeing shares, as in, they can browse them? Normal, unless you made these
hidden shares or had disabled NetBIOS over TCP/IP.

Or, seeing shares, as in, someone who is not a member of the Accounting
security group, can see/open files in folders in the Accounting share, to
whch only (for example) Administrators & the aforementioned Accounting group
are listed as having NTFS permissions?

Roger Abell [MVP]
07-09-2005, 10:53 PM
There may be only a few causes
1. the users's accounts have had their group memberships changed
2. the share level permissions on those shares was altered
3. the underlying NTFS permissions on those shares was altered

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4
"Mark" <Mark@discussions.microsoft.com> wrote in message
news:067C2005-FC92-4001-8C28-6D9C7513BF9F@microsoft.com...
> Running Windows 2003 network....our groups were working fine. All of a
> sudden, all users have permission to see all of the shares (ie. quality
> has
> permission to see all of accounting). No changes were made on our OU.
> Appreciate any help on this matter?


AD question