Group ACLs

From: Brian Whiting (nospam_at_deny.com)
Date: 01/07/05 

Date: Fri, 07 Jan 2005 19:36:49 GMT

I'm trying to figure out how the new ACL capabilities work relative to
membership in multiple groups. For instance under Novell, any user could be
a member of any or all groups. Whenever they accessed a resource, their
effective permissions were a sum of all the groups' permissions plus
whatever specific user permissions they had. The articles I found in Google
all assume member ship in one particular group. Does anyone know how the
group membership rights are processed, and if a linux client passes all
group memberships in its request for access to a resource like a windows
client does?

Relevant Pages

  • Re: WinXP computer not authenicating properly on Win2k Domain Controller
    ... The problem with accessing other resources is probably a group membership / ... What are the permissions that are set on each user's ... Can the domain Administrator account access them? ... >> browse to certain system folders, I can't change IP settings, etc. ...
    (microsoft.public.win2000.active_directory)
  • Re: Corrupted user account?
    ... It sounds like a big mess (most probably becausesome default permissions ... > been having some weird issues using Outlook 2000 sp3. ... > 3) USERA is owner of a security group called Sales Department. ... > She was able to change membership a few weeks ago. ...
    (microsoft.public.win2000.active_directory)
  • Re: Default file/folder security permissions for a new user
    ... The membership of Authenticated Users is determined when that user ... exclude) resource access to user accounts that you knew about and/or were ... You are not looking at HIM, you are looking at the permissions associated ...
    (microsoft.public.windows.server.security)
  • Re: Determine what permissions a group has?
    ... The permissions are stored in the ACL of the resource, not the group, so it's difficult. ... You could query AD for printQueue objects to get your list of printers and roll through those or you could put each of those printer-membership groups into a master-printer group, so that you could poll the membership of one master list to get the complete list of printer-membership groups, then compare that to the user's membership. ...
    (microsoft.public.scripting.vbscript)
  • Re: Group Policy applies to some users, but not others
    ... This may be a result of inconsistent group membership and permissions on ... How are the permissions on the GPOs assigned? ... listed in the GPO permissions/access control list. ...
    (microsoft.public.win2000.group_policy)