Problem solve Get help with specific problems with your technologies, process and projects.

Efficiently permission users to redundant data shares (or application servers)

Giving user permissions can be a tricky thing, but this tip makes things much easier.

On networks with redundant data servers, you can end up permissioning the same users two or three times if you...

permission the users directly to the data share. A better way to do this is to create a Global group on the domain controller for, let's say, the accounting department.

We will call the Global group "Global_Accounting." On the individual data servers, create local accounts called "Local_Accounting." Permission each Local_Accounting group with the Global_Accounting group.

Now, permission each Accounting share on each redundant data server with their respective Local_Accounting group. Now all you have to do is add each Accounting department user one time to the Global_Accounting group, and all Accounting users will be automatically added to each corresponding Local_Accounting group with the permissions you set up when you added the Local_Accounting group to the Accounting share. This will make it much easier to maintain permissioning and keep things in order.

This was last published in March 2002

Dig Deeper on Privileged access management

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.