Sharing Permission

[Anuj K Srivastava]

HI All

We have a windows2003 active directory domain in my company and all the
desktop pc are windows 2000 professional. We have few OUs which is populated
by computers not users, and all the policies are defined on OU level (OU
have computer objects) and all the users are normal Domain Users who can not
share any folder and any desktop and are not able to create System DSN.

I want to give minimun permission to users so that they can share the
folders and can create System/User DSN.

Can anyone Please Help me?

--
Thanks N Regards
__________________________
Anuj Kumar Srivastava
System Administrator
Electrobug Technology, Gurgaon

 

[Jorge_de_Almeida_Pinto]

HI All

We have a windows2003 active directory domain in my company
and all the
desktop pc are windows 2000 professional. We have few OUs
which is populated
by computers not users, and all the policies are defined on OU
level (OU
have computer objects) and all the users are normal Domain
Users who can not
share any folder and any desktop and are not able to create
System DSN.

I want to give minimun permission to users so that they can
share the
folders and can create System/User DSN.

Can anyone Please Help me?

--
Thanks N Regards
__________________________
Anuj Kumar Srivastava
System Administrator
Electrobug Technology, Gurgaon

Share creation restrictions. Access to share operations such as
creating a
share, changing share information, and deleting a share, are
controlled by
security descriptors. On a server, administrators can decide who
can/cannot
perform certain share operations. For example, on a file server,
administrators should be able to delegate or remove Power Users to
create
file shares. The ability to create/delete shares is controlled by a
ACE in
the security descriptor, where Power Users can be added/removed from
the
security descriptor to allow or deny the ability.
The security descriptors are stored in the registry by SRV service,
under
LanManServerDefaultSecurity, as following: . SrvsvcShareFileInfo,
REG_BINARY: Permission to control access on file share operation.

. SrvsvcSharePrintInfo, REG_BINARY: Permission to control access
on
print share operation.

. SrvsvcShareAdminInfo, REG_BINARY

For the system/user DSNs look at:
http://support.microsoft.com/?kbid=213772

does this help?

 

[Anuj K Srivastava]

This doesn't help me.

All the user login on domain abc.com (Windows server 2003, Win2k
professional) and they are not able to share folders on their own computers.
please help.


--
Thanks N Regards
__________________________
Anuj Kumar Srivastava
Jr. System Administrator
Electrobug Technology, Gurgaon
(e-mail address removed)

Share creation restrictions. Access to share operations such as
creating a
share, changing share information, and deleting a share, are
controlled by
security descriptors. On a server, administrators can decide who
can/cannot
perform certain share operations. For example, on a file server,
administrators should be able to delegate or remove Power Users to
create
file shares. The ability to create/delete shares is controlled by a
ACE in
the security descriptor, where Power Users can be added/removed from
the
security descriptor to allow or deny the ability.
The security descriptors are stored in the registry by SRV service,
under
LanManServerDefaultSecurity, as following: . SrvsvcShareFileInfo,
REG_BINARY: Permission to control access on file share operation.

. SrvsvcSharePrintInfo, REG_BINARY: Permission to control access
on
print share operation.

. SrvsvcShareAdminInfo, REG_BINARY

For the system/user DSNs look at:
http://support.microsoft.com/?kbid=213772

does this help?

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-Directory-Sharing-Permission-ftopict418778.html
Visit Topic URL to contact author (reg. req'd). Report abuse:

http://www.windowsforumz.com/eform.php?p=1398238