官术网_书友最值得收藏!

Configuring Dynamic Access Control

The next steps will provide you with the main tasks to implement your first Dynamic Access Control configuration.

Create some test users in your Active Directory with a minimum of 10 users and:

  1. Define the Active Directory claim types.
  2. Country, Department, and Location for the folder structure decided earlier.
  3. Populate the three attributes for the 10 test users.
  4. Define the Resource properties for Country, Department, and Location.
  5. Define the Active Directory Access Rule as follows:
    (Resource.Country equals User.Country) AND (Resource.Location equals User.Location) AND (Resource.Department equals User.Department)
  6. Build a Central Access Policy and deploy the Access Rule to the file servers.
  7. Build a Resource Property list, and deploy it to the file servers.
  8. Open an administrative PowerShell, and fire gpupdate /force and Update-FSRMClassificationPropertyDefinition on the file server.
  9. On the resources, apply the Resource properties correctly.

    Note

    Every folder gets a Country, Department, and Location stamp.

  10. Apply the Central Access Policy to the file shares.
  11. Apply the Access Rule to all the Country shares and the Location and Department folders.
  12. Try out whether access is allowed or not.

Note

Try to fix this first short solution with the help of the provided information on this chapter or use the following lab to give you some advice to solve this problem:

http://online.holsystems.com/Software/holLaunchPadOnline/holLaunchPadOnline.application?eng=TENA2013&auth=none&src=CommNet&altadd=true&labid=8697

主站蜘蛛池模板: 巢湖市| 榆社县| 徐汇区| 林州市| 贵定县| 堆龙德庆县| 康保县| 宜川县| 康乐县| 大新县| 宁河县| 萨嘎县| 南溪县| 招远市| 保德县| 河源市| 梁河县| 天台县| 定襄县| 勐海县| 绥芬河市| 霍邱县| 如东县| 上杭县| 神木县| 英山县| 喀喇| 禹州市| 耿马| 台北市| 化隆| 濉溪县| 马龙县| 上杭县| 靖安县| 思茅市| 民乐县| 波密县| 河池市| 罗平县| 九江市|