Re: Authorization list - or equivalent

[Lukas Beeler <lukas.beeler@xxxxxxxxxxxxxxxx>]

On Wed, Sep 23, 2009 at 22:02, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx> wrote:
> On the i I've always secured these with authorization lists (I love
> authorization lists). ÂI don't think Windows has the equivalent of
> authorization lists. ÂIs setting up Groups and assigning users to Groups the
> generally accepted, correct way to do this in Windows?

A G DL P
http://en.wikipedia.org/wiki/AGDLP

Accounts Global DomainLocal Permissions

Basically, you use multiple Domain Local Groups to effectively set
permissions on files or folders. For each type of permission, you need
a single group. Then, Global Groups are members of the Domain Local
Groups (group nesting). Finally, the user account objects are members
in the Global Groups.

You can also add universal groups, but there's no need for that unless
you have multiple domains and thousands of users.