Bug in Security tab or my mistake?
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Bug in Security tab or my mistake?

 
Post new topic   Reply to topic    Windows Server Forum Index -> Clustering
Author Message
FFLY
Guest





Posted: Tue Oct 18, 2005 4:50 pm    Post subject: Bug in Security tab or my mistake? Reply with quote

I am trying to deny one specific (domain) account full control to a cluster,
using the 'security' tab on the cluster name in cluadmin. I have had no
success in doing so. I can set the 'deny' permission without any problems,
but it doesn't prevent that account of accessing and managing the cluster
(using cluadmin.exe) whatsoever.
I even tried to stop/start the cluster services on my 2 nodes, to no avail.

For the sake of clarity I should add that this account happens to be a
member of the local admins group. But why isn't the deny taking precedence?

Regards
Back to top
Chuck Timon [MSFT]
Guest





Posted: Tue Oct 18, 2005 4:50 pm    Post subject: Re: Bug in Security tab or my mistake? Reply with quote

Cannot be done. It is all or nothing for 'Permit', No deny.

--
Chuck Timon, Jr.
Microsoft Corporation
CCS Beta Engineer
This posting is provided "AS IS" with no
warranties, and confers no rights.
"FFLY" <FFLY@discussions.microsoft.com> wrote in message
news:9497B58B-CA2C-4243-BF78-7A7B5462A717@microsoft.com...
Quote:
I am trying to deny one specific (domain) account full control to a
cluster,
using the 'security' tab on the cluster name in cluadmin. I have had no
success in doing so. I can set the 'deny' permission without any problems,
but it doesn't prevent that account of accessing and managing the cluster
(using cluadmin.exe) whatsoever.
I even tried to stop/start the cluster services on my 2 nodes, to no
avail.

For the sake of clarity I should add that this account happens to be a
member of the local admins group. But why isn't the deny taking
precedence?

Regards
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Clustering All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB