[fen tyler]

Hello again

I've reached a point in setting up the server where I want to add applications (e.g. an accounting package) and control which users have access.

I guess this could be done by setting NTFS permissions on the executable but I assume this would be better accomplished by assigning shares in Active Directory ?

I'd be very grateful for any pointers

Thanks

Fen

[wkasdo]

that would depend completely on the application. Usually, it is the application itself that determines who should have access. Assigning permissions on the executable is unusual, unless it is a Terminal Server.

I expect that you need explicit permissions only for very old dos-type applications. In that case you would set the permissions on the executable using a group, making sure to remove access for Everyone and Authenticated Users.

> but I assume this would be better accomplished by assigning shares in Active Directory ?

No, that has nothing to do with it. In AD you can publish the location of shared folders, nothing more.

[fen tyler]

Thanks wkasdo

Helpful advice - I'll experiment !

Fen