I am new to Windows Server 2003 and I am wondering how a user account can restrict what that user is allowed to do on the local machine, the PC. How can I see what the restrictions are? Thanks, Dan.

If you are talking abt the files and folders kind of restrictions then please refer NTFS permissons. http://technet.microsoft.com/en-us/library/cc757422%28WS.10%29.aspx you can also read more about group plocies http://technet.microsoft.com/en-us/library/cc779838%28WS.10%29.aspx

That doesn't really help. Is there an idiots guide to this somewhere? Cheers, Dan.

what would you like to achieve please elaborate your question we might be able to help you outhttp://www.virmansec.com/blogs/skhairuddin

The problem that I have is that there are a couple of accounts that for some reason when the user logs on, some of the files on the PC are restricted. If I log this user off and then back on again the files are not restricted. It seems a very odd situation and I do not know why it is happening. My problem is, that I do not understand how files on the PC can be restricted by an account on the file server and how can I "see" what the restrictions are. I've looked at the user account and I can see nothing there that would suggest that the files are being restricted. It is very frustrating and I feel very much, out of my depth. Cheers, Dan.

Hi Dan, I think I know what you mean, but just a few questions to make sure your problem is what I think it is. 1. At the start of your problem explanation - you mentioned a Local PC, right after talking about the server in the same sentence. Are you talking about logging onto the server locally "The Local PC" or another PC all together? My Assumption ============ I assume you are trying to log onto a computer other than the server. In which case, please answer the following: is the Windows 2003 Server a Domain Controller? is the PC you are logging on to added to the Domain? have you created a user account in Active Directory on the Windows 2003 Server? Are you using the User Account you created in Active Directory to log onto the PC? If you can answer that for me, people will be able to help you further. Cheers.Kind Regards, Robbie Battam MCP

Hi Dan, If the issue is as simple as Permissions on a folder. Log on as an administrator. or an account that has full control over the folder,locate and right-click on the folder(s) you are having trouble with and Choose "Properties" from the right-click menu. I am assuming the folder is shared to everyone already, however it can't hurt to check the "sharing" tab also and make sure Permissions are is set to "Everyone" with all the boxes ticked. go to the "Security" Tab. (This is known as NTFS Permissions). You can now see which groups or user account can do certain things to this folder. If your group isn't in there, add it. (how you do this depends on whether your user account belongs to a domain group or not). If you don't know what your group is, add "Everyone" by hitting the "Add" button and typing Everyone, and then clicking "OK" Normally we don't always share all our folders with everyone, as some things are personal information or information that isn't allowed to be seen by certain individuals, but in your case I am trying to make it easier for you to get access to this folder.Kind Regards, Robbie Battam MCP

Hi Dan, If the issue is as simple as Permissions on a folder. Log on as an administrator. or an account that has full control over the folder,locate and right-click on the folder(s) you are having trouble with and Choose "Properties" from the right-click menu. I am assuming the folder is shared to everyone already, however it can't hurt to check the "sharing" tab also and make sure Permissions are is set to "Everyone" with all the boxes ticked. go to the "Security" Tab. (This is known as NTFS Permissions). You can now see which groups or user account can do certain things to this folder. If your group isn't in there, add it. (how you do this depends on whether your user account belongs to a domain group or not). If you don't know what your group is, add "Everyone" by hitting the "Add" button and typing Everyone, and then clicking "OK" Normally we don't always share all our folders with everyone, as some things are personal information or information that isn't allowed to be seen by certain individuals, but in your case I am trying to make it easier for you to get access to this folder.Kind Regards, Robbie Battam MCP

Hi Dan, I think I know what you mean, but just a few questions to make sure your problem is what I think it is. 1. At the start of your problem explanation - you mentioned a Local PC, right after talking about the server in the same sentence. Are you talking about logging onto the server locally "The Local PC" or another PC all together? My Assumption ============ I assume you are trying to log onto a computer other than the server. In which case, please answer the following: is the Windows 2003 Server a Domain Controller? is the PC you are logging on to added to the Domain? have you created a user account in Active Directory on the Windows 2003 Server? Are you using the User Account you created in Active Directory to log onto the PC? If you can answer that for me, people will be able to help you further. Cheers. Kind Regards, Robbie Battam MCP Hi Robbie, thanks for your reply. The answer to all your questions is yes. I just don't understand how an account on the file server can affect files on a PC. Cheers, Dan.

Hi Dan, If the issue is as simple as Permissions on a folder. Log on as an administrator. or an account that has full control over the folder,locate and right-click on the folder(s) you are having trouble with and Choose "Properties" from the right-click menu. I am assuming the folder is shared to everyone already, however it can't hurt to check the "sharing" tab also and make sure Permissions are is set to "Everyone" with all the boxes ticked. go to the "Security" Tab. (This is known as NTFS Permissions). You can now see which groups or user account can do certain things to this folder. If your group isn't in there, add it. (how you do this depends on whether your user account belongs to a domain group or not). If you don't know what your group is, add "Everyone" by hitting the "Add" button and typing Everyone, and then clicking "OK" Normally we don't always share all our folders with everyone, as some things are personal information or information that isn't allowed to be seen by certain individuals, but in your case I am trying to make it easier for you to get access to this folder. Kind Regards, Robbie Battam MCP The thing is, is that these folders are on the PC not on the file server. They are not shared as they are local to the PC. I would have thought that ALL files on the PC should be available to ALL users. Cheers, Dan.