| Steven Umbach 2003-08-10, 10:24 pm |
| Each W2K computer has it's own local sam that stores user account info
that you have to authenticate against if you are in a workgroup unless you
enable the guest account and include the everyone group in permissions. Ntfs
permissions apply to all users that access a computer, while share permissions
apply only to network access. When a computer joins a domain, then you have the
ability to add users/groups from the domain to your ntfs/share permissions. That
way if there is a thousand users, the users are managed centrally on domain
controllers instead of having to create one thousand user accounts on every
computer. --- Steve
"Logan W." <rlwebb@SPAMAWAYchartertn.net> wrote in message
news:vj626anj6v5ab3@corp.supernews.com...
> all running Win2k pro with NTFS, all networked together. In this
> theoretical situation, you have to log onto each computer separately, yes?
> So this is really a peer-to-peer network? And the permissions are all
> embedded in the shared resources?
>
> Let's say you add a higher-up version of Win2k to a system and turn the
> network into a domain-based one. Well then, if NTFS still embeds the
> permissions inside of the individual resources, what is the real security
> benefit?
>
> Logan
>
>
|