Hello, I have and Active Directory and few shared folders. In folder everyone is having rights to write and delete. Those who are using laptop are having two logins. One with AD domain and another with local domain. If someone login with local domain username, this user should not get access to any shared folder in the network. At present when someone login with local domain user, if the user enter their AD domain username/password, they are able to access any shared folder in the network. Can someone help me to protect my data. AD Domain level having complete security. Local Domain having personal data. Regards Tonio 1 person needs an answerI do too

Now define the domain level security by assigning particular users for whom you want assign full access. Domain level security override the share level security and the local user will not write to that folder and will have read only access. Don't change access to everyone, everyone must have full access other wise the domain users will not able to write into that folder.bcdalai, MCP, MCSA, MCSE, MCTS: Vista. http://bcdalai.blogspot.com/

But when a local user tries to access a shared folder in the network, it will ask to enter user name password. At this point if the user enter the details of AD domain username/password ( abc.com\username ) will be able to access the folder. AD domain user has got rights to write any data to shared folder. At the same time local domain user should not have even read permission. I tried the the way you said and it is working. Still local user is able to view and copy the data. Thanks for your suggestion, if you can give some more details it will be helpful George

Note that the user name and password you are giving to the local domain user must not be in the administrator groups or in the group where the full permission is granted. That user must have read only access to that particular shared folder. If you have enough time to read and understand the different sharing schemes in a server/local environment then read it: http://support.microsoft.com/kb/323420 http://technet.microsoft.com/en-us/library/dd277411.aspx or read the third part content at: http://www.mcmcse.com/microsoft/guides/ntfs_and_share_permissions.shtml Third party content have no guarantee of correct info, so please always see Technet/MSDN libraries for more info on this topics.bcdalai, MCP, MCSA, MCSE, MCTS: Vista. http://bcdalai.blogspot.com/