Share access to another group

I created a folder in server, I have that I assigned two group called GP1 and GP2. I add a username GOD GP1 and GP2. For GP1 I have permission to read only and for the GP2 I have permission for READ WRITE, if the GOD user want to access the shared folder, the authorization will indeed now

If the user wants to read, GP1 and GP2 would allow this operation.
If the user wants to write, then only GP2 would grant this permission... but given that the user is a member of GP2 and GP2 allows writing, user will have permission to write via GP2.  Therefore, GP2 with the more liberal privilege, it will dominate.

HTH,
JW

Tags: Windows

Similar Questions

  • Of the group as the owner of another group - error LDAP 50

    I installed some groups within the IOM and for some of these members of the group, I would like to be able to manage membership in another group.

    I have:

    Group1 with owner User1, User2, user3 and user4, User5, Utilisateur6 members
    With owner User1 and User2 Group1 group2.

    In the bosom of the DAS should user4, User5 and Utilisateur6 now be able to assign members to Group2 right?

    User4 becomes a "LDAP: error code 50 - insufficient access rights" error when you try to assign members within Group 2.

    I completely understand you how spread the rights or is something wrong?

    Thank you.

    You must be an administrator of the group in order to manage a group.

  • Provisioning of users of automated Seggregate using Access Policy-Diff groups/Org

    Hello

    By default, users created in IOM - via GTC / via self-registration / via administrator - they all are assigned to the "All Users" group Can we assign these users to another group, defined by the user, for example "trialgroup", default and Unassign the group "All Users". If so, how can we do?

    This issue is related to another question of mine:

    I want to avoid all the users that are created in the IOM system - to be all together put in service to a single IT resource in my case OID directly via the access policy that can be applied to each group. I want to keep the system extensible for future purposes. And the only way is to the provision of resources direct seggregate via access through different 'groups' strategy. So the solution I could think about was to assign all users who are currently created (via GTC and via the load mass in IOM) to a separate group and assign a policy of access to the group so that in the future if another resource comes into picture then the system can be extended by creating more groups and design of individual to separate for the same access policies.

    Is it makes sense?

    Please provide your inputs! Advice/suggestions/ideas are welcome.

    TIA,
    -oidm.

    I'm actually not sure, what you want to achieve form the content of this post. If you mean that you don't want each user to IOM to be configured in OID automatically via the access policy, then I suppose that in this case you aplly the ALL_USERS group access strategy.

    Well I miss the flow of your question, but here's what you can based on my understanding:

    (1) forget the ALL_USERS group. We cannot do anything about it. Any created user will be a part of this group, and you cannot delete a user in this group.
    (2) instead of what you can do is create another group, such as trialgroup and all users a member of this group as well. It would be simple to do. See the next step. Use the addMemberUser() of addMemberUser interface API.
    (3) create an adapter of the entity with an added javatask, which takes a username entry and assigns this user to this group (trialgroup) in the use of the IOM above API. Mount this adaptation for the trigger for insertion after the Manager of data objects "users." (He also has an other entity ootb adapter that adds all users to the Group of ALL_USERS).

    (4) attach your strategy of access to this group.
    (5) now you are also free to expand your system by creating more groups and access policies. It shouldn't be a problem.

    Thank you

    Sunny

  • I need the Java Player for firefox on a stand-alone computer without internet access. I have internet access on another computer. How can I do this?

    I have a stand-alone computer (no internet access) with firefox to run the Java Player. I have internet access on another computer in order to download files and hover over things to the stand-alone computer to install. That do and where can I download and how I install on the stand-alone computer.

    Thank you

    Leroy

    Hi, to get the Offline Installer that you can use on the computer without internet access, please visit https://java.com/en/download/help/windows_offline_download.xml

  • When sending emails to the bcc and access to a group, I hit the button send and dates back to the Inbox without sending.

    When sending emails to the bcc and access to a group, I hit the button send and dates back to the Inbox without sending. I even changed users on my pc and it always does.  I closed temporarily add-ons thinking that would help, but did not seem to make a difference.  Can I have a virus?

    Hello

    • E-mail are what customer you referring?

    If you use Windows live mail, then the number you posted is related to windows live and will be much better suited in Windows live forums. Click on the link below.

    Windows Live Solution Center

    http://www.windowslivehelp.com/

  • Remote access PIX - two groups

    Hi all

    Please is it possible to distinguish two groups of remote access on the radius server?

    For example, I have two groups. One for employees and secondly to externalist.

    I authentificate the server a radius.

    It is possible to distinguish between these two groups on the radius server?

    How can I do this?

    Because when I create two groups of tunnel and two political groups, I am still able to access the two groups with the users in the Group employee or externalist. And when I look for log on to the IAS server, I couldn't distinguish between the journal entry when I login as employee and when I log in as externalist :(

    Thanks in advance

    Tomas

    Tomas,

    OK, so we have 2 groups of tunnel and 2 group policies for groups of tunnel, here's what you have to do.

    * First, we close group policy to groups of tunnel so that a single policy would not use the other tunnel-group. To achieve this, some examples of CLI commands

    attributes global-tunnel-group test1

    strategy-group-by default peche1

    tunnel-group test2 General attributes

    strategy-group-by default granted.2

    attributes of the peche1 group policy

    group-lock value test1

    policy2 group policy attributes

    group-lock value test2

    * Now lets do the config on IAS. You should have 2 remote access policies separate created for your groups of 2 different windows in IAS, for example

    Remote access policy x

    If the Windows group matches "yourdomain\externalist".

    Grant access

    Remote access policy is

    If the Windows group matches "yourdomain\employees".

    Grant access

    Now in the remote x access policy, click on edit profile > click on advanced > click Add. Choose the attribute "Class". This policy is for externalists and lets say we want to lock windows to the tunnel test1 group group. Then enter UO = Policy1 value in the attribute Class. It is the name of group policy that we have locked in tunnel-group test1

    Follow the same path and get into UO = policy2 for remote access policy there, employees windows group.

    Concerning

  • My one year contract is about to expire. Can I extend the same price for two months and cancel the contract without redoing the accession of another full year?

    My one year contract is about to expire. Can I extend the same price for two months and cancel the contract without redoing the accession of another full year?

    Hello

    The plan of photography is an annual plan therefore would renew for another 12 months.

    Under the terms of subscription, an early termination fee would be applied if you have decided to cancel two months in the new contract - Adobe - General conditions of subscription

    Fill the cloud creative and plans unique app are available on a monthly basis, which can be another option - https://creative.adobe.com/plans

    Kind regards

    Bev

  • Access with another computer

    Hello

    In Windows 8, I have VMWare Player 5 installed CentOS with a Rails server.

    Here is the output of the ifconfig command:

    eth1 Link encap HWaddr 00: 0C: 29:60:0F:AF
    INET addr:192.168.118.136 Bcast:192.168.118.255 mask: 255.255.255.0
    ADR inet6: fe80::20c:29ff:fe60: faf / 64 Scope: link
    RUNNING BROADCAST MULTICAST MTU:1500 metric: 1
    Dropped packets: 530695 RX errors: 0:0 overruns: 0 frame: 0
    Dropped packets: 626707 TX errors: 0:0 overruns: 0 carrier: 0
    collisions: 0 txqueuelen:1000
    RX bytes: 202357267 (192,9 MiB) TX bytes: 479045323 (456.8 MiB)
    Basis of interruption: 19 address: 0 x 2024
    Lo encap:Local Loopback link
    INET addr:127.0.0.1 mask: 255.0.0.0
    ADR inet6:: 1/128 Scope: host
    RACE of LOOPING 16436 Metric: 1
    Fall of RX packets: 79511 errors: 0:0 overruns: 0 frame: 0
    Dropped packets: 79511 TX errors: 0:0 overruns: 0 carrier: 0
    collisions: 0 txqueuelen:0
    RX bytes: 11402959 (10.8 MiB) TX bytes: 11402959 (10.8 MiB)

    In Windows 8 (PC), I can access with 192.168.118.136:3000

    But I also would like to access it from another computer on the same network.

    I ran the command line in windows 8 with admin rights to open the virtual network Editor: c:\Program Files (x 86) \VMware\VMware Player > rundll32.exe vmnetui.dll VMNetUI_ShowStandalone

    I saved the following options (see picture):

    vmware.png

    I can not even access from another computer 192.168.118.136:3000.

    Thanks in advance for your help.

    That's how it should work, unless the traffic/port is blocked by the firewall on the host.

    Basically, you can forward every port you want at the prompt, it doesn't have to be the same port that you used in the comments (e.g. 12345 67890 prompted port host port redirection). Just make sure that you do not use a port that is required by the host of the operating system itself.

    André

  • Move the group to another group

    Hi all

    Can help to create a script to move the group named "Shine" in another group named "shine everything."

    Thanks in advance.

    Snapshot show for a better understanding.

    set.jpg

    Does that help?

    // move groups of a certain name into group of a certain name;
    // 2015, use it at your own risk;
    #target "photoshop-70.032"
    if (app.documents.length > 0) {
    var myDocument = app.activeDocument;
    var name1 = "Shine";
    var targetName = "Shine All";
    var targetGroup = layersWithName (targetName);
    // if exactly one group qualifies;
    if (targetGroup.length == 1) {
    // collect groups;
    var theGroups = layersWithName(name1);
    // process groups;
    for (var m = theGroups.length - 1; m >= 0; m--) {
      moveTo(theGroups[m][1], targetGroup[0][1]);
      };
    }
    else {alert ("too many or too few groups called »"+targetName+"«")}
    };
    ////////////////////////////////////
    function layersWithName (thisName) {
    // the file;
    var myDocument = app.activeDocument;
    // get number of layers;
    var ref = new ActionReference();
    ref.putEnumerated( charIDToTypeID("Dcmn"), charIDToTypeID("Ordn"), charIDToTypeID("Trgt") );
    var applicationDesc = executeActionGet(ref);
    var theNumber = applicationDesc.getInteger(stringIDToTypeID("numberOfLayers"));
    // process the layers;
    var theLayers = new Array;
    for (var m = 0; m <= theNumber; m++) {
    try {
    var ref = new ActionReference();
    ref.putIndex( charIDToTypeID( "Lyr " ), m);
    var layerDesc = executeActionGet(ref);
    var layerSet = typeIDToStringID(layerDesc.getEnumerationValue(stringIDToTypeID("layerSection")));
    var isBackground = layerDesc.getBoolean(stringIDToTypeID("background"));
    // if not layer group collect values;
    if (layerSet != "layerSectionEnd" /*&& layerSet != "layerSectionStart"*/ && isBackground != true) {
    var theName = layerDesc.getString(stringIDToTypeID('name'));
    var theID = layerDesc.getInteger(stringIDToTypeID('layerID'));
    if (theName == thisName) {
    theLayers.push([theName, theID)
    }
    };
    }
    catch (e) {};
    };
    return (theLayers)
    };
    ////// move //////
    function moveTo (theLayer, theGroup) {
    // get index;
    var ref = new ActionReference();
    ref.putIdentifier( charIDToTypeID( "Lyr " ), theGroup - 1);
    var layerDesc = executeActionGet(ref);
    var theIndex = layerDesc.getInteger(stringIDToTypeID("itemIndex"));
    // =======================================================
    var idmove = charIDToTypeID( "move" );
        var desc5 = new ActionDescriptor();
        var idnull = charIDToTypeID( "null" );
            var ref4 = new ActionReference();
            var idLyr = charIDToTypeID( "Lyr " );
            ref4.putIdentifier( idLyr, theLayer );
        desc5.putReference( idnull, ref4 );
        var idT = charIDToTypeID( "T  " );
            var ref5 = new ActionReference();
            var idLyr = charIDToTypeID( "Lyr " );
            ref5.putIndex( idLyr, theIndex );
        desc5.putReference( idT, ref5 );
        var idAdjs = charIDToTypeID( "Adjs" );
        desc5.putBoolean( idAdjs, false );
        var idVrsn = charIDToTypeID( "Vrsn" );
        desc5.putInteger( idVrsn, 5 );
    executeAction( idmove, desc5, DialogModes.NO );
    };
    

    under the direction

  • Libraries to share with one another in the same Mac OSX

    My mac has several partitions with different OSXs.

    Can I share itunes libraries I made in an OSX with itunes in the other OSXs in PC?

    Home sharing work in the end? Do I have to allow the Internet to itunes.app in order?

    And supplementary question is, if the above is possible, which is for sharing rules, IE. a library, X, in the itunes of the score has nothing and another library, Y, in the partition of another itunes music title A, B, C, then, what happens when they share libraries? Music tracks A, B, C will be added to X, or all titles there must be gone for nothing?

    Note:

    Versions of iTunes I use are mainly ver11 and ver12 and operating system versions that I use are mainly 10.6 and 10.8.

    SaramandarG wrote:

    ....

    Can I share itunes libraries I made in an OSX with itunes in the other OSXs in PC?

    ....

    Direct access to the library is only possible if all versions of iTunes are identical.

    SaramandarG wrote:

    Home sharing work in the end? Do I have to allow the Internet to itunes.app in order?

    Home sharing works only between two or more computers that are running on the same network.

  • Unauthorized access from another computer

    I found "Account unknown" as an additional user profile. I believe that my nephew has access to my computer from his computer. I was online and I started while he was on his computer. If I'm on my laptop and it is not on his computer, my laptop works very well. As soon as it connects to his computer, then my laptop runs slowly. According to me, he is accessing my computer somehow. I use Windows XP Home Edition, Version 2002, Service Pack 3. I have the disabled guest user and I have a password to log on to my laptop. Do you know something about the conversion from FAT to NTFS disks? My laptop is not configured for networking and authorize remote assistance is disabled (not allowed). Is it possible that I can see if his computer access my laptop? Thanks in advance for your answer.

    Looks almost like it's using Remote Desktop, but XP Home does not allow that.

    Since you have XP Home Edition, file sharing Simple is applied and remote users can authenticate only as long as the user "guest".  You say you have 'Off' Guest user  How did you do that?  If you did it in the user control panel, which does not disable access to the network - only for interactive access.  To really disable the guest user and deny access to the network, you must open a command prompt window (start-> Run-> "cmd") and enter the command:
    NET user guest / active: No.

    Another approach would be to put a password on the guest user:
    "Set up the password for the user in Windows XP"
      <>http://support.Microsoft.com/kb/555520 >

    You must also make sure that the user 'administrator' built-in gave a password as well, or it may log and undo what you've done.  Also check the "Administrators" group and ensure it doesn't have access to one of the accounts listed there.  List of the members of the Administrators group, open a window to prompt as above and enter the command:
    net localgroup administrators
    which lists all of the users in the Administrators group.

    To see who is connected to your computer, right click on 'My Computer'-> manage-> user Sessions

    A "Account unknown" user profile means that a user who has used to have a profile has been removed from the machine.

    About FAT to NTFS:
    "How to convert a FAT16 or FAT32 of NTFS volume in Windows XP"
      <>http://support.Microsoft.com/kb/307881 >

    HTH,
    JW

  • Location of the bookmarks on an old hardrive that is not Windows, running but the old hard disk files are accessed through another hard drive.

    The old hard disk does not run Windows, so access to the usual file through Windows Explorer or Firefox has not worked for me. The old hard drive is now a slave drive and all files are intact and accessible via the new Windows 7 64-bit operating system.

    You have Windows configured to display the hidden files and folders? If not, do it as soon as the first. http://Windows.Microsoft.com/en-us/Windows/show-hidden-files#show-hidden-files=Windows-7

    Then, what version of Windows do you have on the old drive? Your profile folder must be on the way there:

    Windows XP and earlier versions:

    \Documents and Settings\username\Application Data\Mozilla\Firefox\Profiles
    

    Windows Vista and later:

    \Users\username\AppData\Roaming\Mozilla\Firefox\Profiles
    

    If you find multiple profile folders, see the recent order. You find a subfolder named bookmarkbackups. This article describes how to restore the .json files, you will find: restore bookmarks from a backup or move them to another computer.

    A little luck?

  • Cannot share links or create groups

    I have not presented an option to share a file/folder as a link or using facebook.  The option is not visible at all.  I can also create a group using the Group menu on the left side of the site Web in SkyDrive.  When I try to create a group, I get an error saying that Windows Live Groups don't support family security accounts.  But I don't use all parental control.  I used in 2003-2004, but stopped using it several years ago.  I tried connecting on the family safety website to see if I can fix it myself and there is no indication that I never used family safety.  I could really use some help so I can use all the features of SkyDrive.

    Hello MicrosoftFan88,

    Please see the link below for updates on the issue. In addition, make the post on the link the only post to avoid confusion.
    Thank you.
  • ea3500 - usb drive, ftp works, share windows on another address?

    Hello

    I have my ea3500 in mode bridged behind my modem, which seems to work well.
    I have fixed the IP 192.168.1.20 (modem dhcp range begins to 192.168.1.64), where I can access the drive via ftp.

    I can't access the drive as a windows share, I think that the problem lies in the fact that the server address IP LAN (storage) and/or the ip address of shared disk (definition folder under drive) is set to 10.82.111.83.

    I tried to change that in different ways (no direct way to do it), but I lose my network if I start to change to bridge mode.

    How can I access the disk as a windows share?

    When you set up your EA3500 to bridge mode, you can not set to "obtain an IP address automatically" because there is a bug.

    You must specify an address. mask subnet, default gateway, and DNS. Look at these instructions to bridge mode, and then try again. Then EA3500 to factory default reset and try again, but do not use "obtain an ip address automatically".

    http://KB.Linksys.com/Linksys/GetArticle.aspx?docid=28cee6a2fb0d4176a2210942d1d5836c_Setting_up_the _...

  • What is the fastest way to load a video so that I can share it with another user?

    Periodically, I take videos of my sessions clinical (I work as a psychologist) and I need to download them (strongly) to the internet to access to see my supervisor. I used to use the programe of Picture Motion Browser, until my computer crashed - I lost the program, but have since managed to understand that all I have to do is to connect my camcorder to my laptop Sony using the cable supplied with the video camera (not USB, other cable - I forgot what it's called) and I can see the videos with Windows Media Player.

    Also I tried to download videos on Youtube (using their private setting), but as short as 5 minutes video. has taken about an hour to download.

    How can I download the video for my supervisor has access to them? I have a program called Dropbox-it allows the sharing of files - I have not tried this one yet for videos, but wonder if anyone knows if it would be better than Youtube, or if you have any other ideas?

    Thanks in advance!

    Hi Psych13,

    You can try using Windows Live Skydrive and see if you can download the videos.

    SkyDrive is a free hosting service that allows users to upload files to a cloud storage and then access it from a Web browser.

    For more information, you can consult the following articles:

    Windows Live SkyDrive

    SkyDrive: Share photos and videos online

    Hope this information is useful.

Maybe you are looking for