Urgent Question?

mobri09

You would like the XXX account to function as follows in relation to a folder called (mystuff).

When the account is logged on locally or accesses the account while logged on to the network, then the account can read and write the folder. I accomplished this by giving the XXX account the Read, write and list folder contents to the folder (mystuff)

Here is my question. When the account is accessed via dial up networking, I want that folder(mystuff) to be locked-unaccessed, just when dialup is used. How would you set this up.

Webmaster

Dunno... If you assigned NTFS permissions for a particular user, those permissions will be valid for that user, doesn't matter if he or she connects thru a LAN, Dialup, and VPN connection.

mobri09

wouldn't you set this up under local security policy. Maybe like under user rights assignment, deny logon threw terminal services???

Webmaster

You could go thru the available policies to check, but I've never seen one that allows you to deny access to a particular folder based on the connection type.

mobri09

or could i just add the xxx account to the dial up account under the folder and deny all access?

hhisgett

Then you would deny the account access if logged on to the network. (If I am following your questions correctly.

The only thing that comes to mind that would help is to assign the user an account that is used for dial-in access and do not assign permissions to that folder for the dial-in account. Just a thought. Usually don't think very well on Saturday's.

mobri09

All i had to do was add the account to the default Dial up group and set some permissions. I made the question way harder than it was. Thanks for the help everyone.