RE: Millennium on Windows XP Pro as User -Active Directory Question

["Peter Caton" <peterc@xxxxxxxxxx>]

I realize that one could go machine to machine and apply the necessary
rights to the C:\Millennium folder.  I am wondering, however, if anyone
use Active Directory and Security Policies to delegate rights to the
Millennium folder?

If so, would you mind sharing how you set this up?

My goal with all this is to create a set of policies that limits access
to the computer itself (user level), gives the necessary rights to the
Millennium folder necessary to run the program (Modify", "Read &
Execute", "List Folder Contents", "Read", & "Write", as noted earlier)
and handle all this, centrally through Active Directory, so no
"hands-on" modifications are needed.

As a side note, all staff machines have Windows XP while our servers are
Windows 2000.

Any help would be appreciated.

Peter W. Caton
Network Administrator
North Suburban Library
Loves Park, Il 61111
(815) 633-4247 ext. 22
Fax (815) 636-5042
e-mail: peterc@xxxxxxxxxx

-----Original Message-----
From: David Jones [mailto:DJones@xxxxxxxxxx] 
Sent: Wednesday, December 10, 2003 8:16 PM
To: innopac@xxxxxxxxxx
Subject: Re: Millennium on Windows XP Pro as User - Update

>>> mciszek@xxxxxxxxxx 12/4/2003 8:49:44 AM >>>
We have not seen any problems with users having full control over this
folder. The only problem I could see happening is that a user may delete
some or all of the contents in C:\Millennium (perhaps trying to be
helpful and "cleaning up" their hard drive!) This would be quickly
remedied by reinstalling the client software however. I doubt that this
will be a problem here.
<<<

Matt,

You shouldn't grant full control to C:\Millennium, but only "Modify",
"Read & Execute", "List Folder Contents", "Read", & "Write",  to
C:\Millennium\jardir and C:\Millennium\resources. That way, end-users
cannot delete the program files, but only the preferences. If they do
that, those files will just be downloaded the next time that Millennium
is started. If you grant them "Full Control", they can change the
security on the folders as well.

Windows Help has an informative matrix of permissions under the heading
"File and Folder permissions".

HTH,
David


_____________________________________________________________________
David Jones                                     mailto:djones@xxxxxxxxxx
Library Systems Manager                   http://www.scu.edu/library/
Orradre Library                                   fax:   408-551-1805
Santa Clara University                            phone: 408-551-7167
500 El Camino Real
Santa Clara CA 95053-0500
_____________________________________________________________________
"Music is the hot sauce on the burrrrito of life"
--Rikochet, Mucha Lucha http://www2.warnerbros.com/lucha/home.html

--
This message was distributed through the Innovative Users Group INNOPAC
list
Public replies:  INNOPAC@xxxxxxxxxx
Update your subscription options:
http://innopacusers.org/list/listinfo/innopac