|
Posted by Roger Abell [MVP] on October 10, 2006, 3:21 am
If you were Registered and logged in, you could reply and use other advanced thread options > Roger,
>
> Thank you for your prompt response. Unfortunately, in my situation, all
> clients need access to the server, however, I wish to be able to have more
> granular control over who, what, when, where than seems to be available
> through XP.
>
> Do you have any idea if Vista will offer more granular access control?
I have seen no change toward allowing Windows to provide built-in
the type of access you are after. It is not an issue of being more granular
but of adopting an entirely different access control model. Access is gated
based on the credentials in use for the access, and the machine where a
domain principal is logged in is not part of the identity of those
credentials.
I have not looked in detail at how right management wares address this,
but I believe such are quite able to do what you outline.
Roger
> Roger Abell [MVP] wrote:
>> No. Access to a share is made in the security context of the
>> account making the access. What you can do is control what
>> machines can communicate with the serving machine (without
>> regard to user at the time), and then of course use normal
>> permissions for the user access. That however cannot address
>> the scenario you outline.
>>
| 
XML site map