Re: Authorization list - or equivalent

[Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>]

After a bit of studying and thought, it's making sense.

Thanks.

On Wed, Sep 23, 2009 at 4:21 PM, Lukas Beeler <lukas.beeler@xxxxxxxxxxxxxxxx
> wrote:

> On Wed, Sep 23, 2009 at 22:02, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>
> wrote:
> > On the i I've always secured these with authorization lists (I love
> > authorization lists).  I don't think Windows has the equivalent of
> > authorization lists.  Is setting up Groups and assigning users to Groups
> the
> > generally accepted, correct way to do this in Windows?
>
> A G DL P
> http://en.wikipedia.org/wiki/AGDLP
>
> Accounts Global DomainLocal Permissions
>
> Basically, you use multiple Domain Local Groups to effectively set
> permissions on files or folders. For each type of permission, you need
> a single group. Then, Global Groups are members of the Domain Local
> Groups (group nesting). Finally, the user account objects are members
> in the Global Groups.
>
> You can also add universal groups, but there's no need for that unless
> you have multiple domains and thousands of users.
>
> --
> Read my blog at http://projectdream.org
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.