2,569
edits
Changes
Jump to navigation
Jump to search
Line 55:
Line 55: + + + + + + + + + + + + + + + + + + + + + +
SME Server:Documentation:Administration Manual:Chapter9 (view source)
Revision as of 11:06, 14 September 2007
, 11:06, 14 September 2007→Groups
After you add (or remove) a user account from a group, the user must log out and log back in for those changes to take effect. Until the user does so, he or she will still have their old group membership information. For instance, suppose you create a new group "sales" and assign user "ffrog" (Fred Frog) to that group. You then create a new i-bay called "salesinfo" that only the "sales" group can access. Fred Frog is still logged into a Windows PC and now tries to connect to the new i-bay through Windows Explorer. He will receive a permission-denied error. He must log out of Windows (he does not need to shut down or reboot, just log out) and login again. Now he should be able to go through Windows Explorer and access the "salesinfo" i-bay without any problem.
After you add (or remove) a user account from a group, the user must log out and log back in for those changes to take effect. Until the user does so, he or she will still have their old group membership information. For instance, suppose you create a new group "sales" and assign user "ffrog" (Fred Frog) to that group. You then create a new i-bay called "salesinfo" that only the "sales" group can access. Fred Frog is still logged into a Windows PC and now tries to connect to the new i-bay through Windows Explorer. He will receive a permission-denied error. He must log out of Windows (he does not need to shut down or reboot, just log out) and login again. Now he should be able to go through Windows Explorer and access the "salesinfo" i-bay without any problem.
======Setting admin rights======
If you are using SME Server as a domain controller and the workstations have joined the domain then the following is possible.
The domain always has three groups created, assigned as follows:
{| border="1" cellpadding="10" cellspacing="0"
!Group Description
!Domain Rights
|-
|Domain Admins
|admin
|-
|Domain Users
|shared (everyone)
|-
|Domain Guests
|nobody
|}
However if you create a group and name it whatever you want but put one of the above for the description then the newly created group will replace the above mapping. So if you create a group called "admins" and give it a description of "Domain Admins" then anyone you assign to this group will be a domain admin and also a local admin on ANY box that has joined the domain.
You can also create a less privileged group "Power Users", see http://www.kellys-korner-xp.com/xp_groups.htm for the rights granted to the different groups.
====Quotas====
====Quotas====