I've adjusted the NXcustom files, so that the user's customer defaults, and the CAM resource library, are outside of the NX110custom directory. So now I would like to lock down the NXcustom folder, so only certain people can edit the files, site and group settings, and the site and group drafting standards.
How do other companies do this in a Windows OS? If we make "Everyone" read only, and give me read-write, I still can't edit the files, since I am part of Everyone. Do you create an NXuser group? or an NXadmin group?
I really want to minimize IT overhead, in having to manage who is part of any groups. Is there an easier way?
Solved! Go to Solution.
Windows will "add up" all the permissions (i.e. it is the union of all applicable group settings, not the intersection). It will see you have read/write, and allow you to change files.
Production: NX10.0.3.5 MP5 + patch/TC11.2
I'd rather be e-steemed than e-diseaseled
So far it's not, and I am locked out of editing anything...and all the users are locked out of having their history, roles, etc. saved, LOL.
In general at our site regular users have read/execute rights, the group NX-Admins has full rights.
Everything is working as expected and I am member of both groups, since the users group is a Windows build-in group.
Output of ICACLS utility on Windows 7:
NX_Custom CREATOR-OWNER:(OI)(CI)(IO)(F) NT-AUTHORITY\SYSTEM:(OI)(CI)(F) DOMAIN\NX-Admins:(OI)(CI)(F) BUILDIN\Administrators:(OI)(CI)(F) BUILDIN\Users:(OI)(CI)(RX)
Production: NX10.0.3, VERICUT 8.0, FBM, MRL 3.1.4 | TcUA 10.1 MP7 Patch 0 (10.1.7.0) | TcVis 10.1
Development: VB.NET, Tcl/Tk Testing: NX12.0
How to Get the Most from Your Signature in the Community