DFS - can different users see different folders at dfs root?

  • Thread starter Thread starter =?iso-8859-1?B?xXNl?=
  • Start date Start date
?

=?iso-8859-1?B?xXNl?=

Question: Is there a way that Domain DFS can be used to
allow users to see different folders at the root level
based on their group membership??

Example:
* The DFS root contains links to the following folders:
Accounting, Budgets, Docs, Shared, Users
* Groups in AD: Staff, Fiscal, Management
* Some staff belong to both Staff and Fiscal.
* All staff get their F: drive mapped to the DFS root.
* Wanted results:
1. Users belonging only to the group 'Staff' should see
the following folders on their F: drive: Docs, Shared,
and Users.
2. Users belonging to 'Fiscal' should see the following
folders on their F: drive: Accounting, Budgets, Docs,
Shared.
3. Users belonging to 'Management' should see all 5
folders on their F: drive.

Is that possible? How?

We currently have a W2K network, but will soon upgrade to
Windows 2003 server, so if the answer requires a Win 2003
server, that is not a problem!

Thank you for any help!
Åse Seeligson
Network Admin
 
Hi Åse,

In Windows NT model, we always enumerate all the folder names (and show
them) but only users will right permissions will be able to access any
folder. So selective viewing of folders based on group membership of users
is not a feature of Windows NT model and hence not possible in W2K or
Win2003.

--
Thanks
Mukul [MSFT]

PS: Please post DFS related queries in newsgroup
microsoft.public.server.dfs_frs. Please use "DFS" in subject to make it
immediately noticeable.

PS: Please find latest dfsutil.exe for Win2003 (updated) at
http://www.microsoft.com/downloads/...C3-C7A3-4B5B-9FF1-FD01B0203DC1&displaylang=en

Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights


Question: Is there a way that Domain DFS can be used to
allow users to see different folders at the root level
based on their group membership??

Example:
* The DFS root contains links to the following folders:
Accounting, Budgets, Docs, Shared, Users
* Groups in AD: Staff, Fiscal, Management
* Some staff belong to both Staff and Fiscal.
* All staff get their F: drive mapped to the DFS root.
* Wanted results:
1. Users belonging only to the group 'Staff' should see
the following folders on their F: drive: Docs, Shared,
and Users.
2. Users belonging to 'Fiscal' should see the following
folders on their F: drive: Accounting, Budgets, Docs,
Shared.
3. Users belonging to 'Management' should see all 5
folders on their F: drive.

Is that possible? How?

We currently have a W2K network, but will soon upgrade to
Windows 2003 server, so if the answer requires a Win 2003
server, that is not a problem!

Thank you for any help!
Åse Seeligson
Network Admin
 
Thanks for your reply. I was beginning to reach that same
conclusion myself after lots of testing. Maybe in a
future version it will be possible...?
-----Original Message-----
Hi Åse,

In Windows NT model, we always enumerate all the folder names (and show
them) but only users will right permissions will be able to access any
folder. So selective viewing of folders based on group membership of users
is not a feature of Windows NT model and hence not possible in W2K or
Win2003.

--
Thanks
Mukul [MSFT]

PS: Please post DFS related queries in newsgroup
microsoft.public.server.dfs_frs. Please use "DFS" in subject to make it
immediately noticeable.

PS: Please find latest dfsutil.exe for Win2003 (updated) at
FamilyId=82E8DEC3-C7A3-4B5B-9FF1-
FD01B0203DC1&displaylang=en

Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights


Question: Is there a way that Domain DFS can be used to
allow users to see different folders at the root level
based on their group membership??

Example:
* The DFS root contains links to the following folders:
Accounting, Budgets, Docs, Shared, Users
* Groups in AD: Staff, Fiscal, Management
* Some staff belong to both Staff and Fiscal.
* All staff get their F: drive mapped to the DFS root.
* Wanted results:
1. Users belonging only to the group 'Staff' should see
the following folders on their F: drive: Docs, Shared,
and Users.
2. Users belonging to 'Fiscal' should see the following
folders on their F: drive: Accounting, Budgets, Docs,
Shared.
3. Users belonging to 'Management' should see all 5
folders on their F: drive.

Is that possible? How?

We currently have a W2K network, but will soon upgrade to
Windows 2003 server, so if the answer requires a Win 2003
server, that is not a problem!

Thank you for any help!
Åse Seeligson
Network Admin


.
 
Back
Top