NTFS and SHARED LEVEL PERMISSIONS IN WINDOWS OPERATING SYSTEMS

Usually people assume by themselves NTFS permission has a higher priority. But infact when NTFS & SHARED LEVEL both applied to a folder or drive, SHARED LEVEL permission always take a higher precedence. So when you provide Full Permission in Shared Level and provide Deny in NTFS it does not have effect on it.

This might be asked when you go for the windows administrator interview. So make sure that you answer perfectly in single line.

SHARED LEVEL PERMISSION takes higher PRECEDENCE than NTFS LEVEL PERMISSION IN WINDOWS OPERATING SYSTEMS

How to install GPMC (Group Policy Management Console)?

Click HERE to download GPMC for windows 2003 server active directory. It's a 2mb .msi file which needs a double click on it to install on your 2003 server. It's a microsoft management console for Group Policy where you can pull the policy which s applied for the paticular user in your network environment. And you can do centralized management of group policy. Previously there was no option to find out what policies have been applied to a particular host. It wasn't that easy to write it down whatever the policy we apply in the network. Now by using GPMC you can pick the particular user or computer to find out what policies has applied to that host alone or your whole network. Isnt' a good news for a Windows Administrator? Have fun... Keep visit my blog for more informations on Active Directory.

How to create users who has a standalone dedicated login capability

I was hoping that I could get some advice regarding how other admins are doing this....

I would suggest you to create a new user account for operational staffs and create a new OU. put all the ops staff in that OU and if you do right click on that you will be able to see Delegate Rights. So you can customize the user rights assignment for that users. If HRadmin need a dedicated logon just give him the high privilege rights to that user alone. This is what i do and it's a hassle free way. So that anyone will not have a necessity to know the network admin password since their role is satisfied.

Win 2003 & NT domain user account login issues...

When you have two domain (2003 domain and NT domain) where trust relationship is enabled, the user created in 2003 server might not be able to login to NT domain computer. The reason could be, replication might not have happened. You can enforce the replication by issuing the following command "ntfrsutl forcerepl" regardless of the scheduled replication. Use replmon command to monitor the replication. If both of the domain in different location, you need to enable Universal Membership Cache.