The syntax of this command is:
NET ACCESS resource [/DELETE]
[/GRANT name:permission[ ...] |
/CHANGE name:permission[ ...] | /REVOKE name[ ...]]
[/TRAIL:{YES | NO}]
This command displays or modifies resource permissions on servers.
Use this command only for displaying and modifying permissions on
pipes and printer queues. Use "net perms" for managing permissions
on all other types of resources.
COMMENTS
You must supply a resource name when using this command.
Use the "net access" command to secure network resources by
specifying who can use each resource and how. You can grant
permissions to users and to groups.
When the server displays resource permissions, it designates
groups with an asterisk ( * ).
If used on a print resource the output of "net access \\print\\laser1"
will look similar to the following:
Resource Permissions Permissions
---------------------------------------------------------------------------
\print\laser1
*Administrators:CP *CREATOR OWNER:CP
*Everyone:C *Print Operators:CP
*Server Operators:CP
*Steve:(none)
The following list shows the types of permissions that can
be assigned for printers and pipes, and what each permission allows
a user to do:
Code Permission
_______________ ______________________________
R (Read) User can read and copy files,
run programs, and change from
one subdirectory to another
within the shared directory.
User can also read the
extended attributes of files.
W (Write) User can write the contents
and extended attributes of a
file.
C (Create) For DIRECTORIES and FILES a user
can create files and
subdirectories within a shared
directory. After creating a
file, a user with C permission
(but without R and W
permission) can read from or
write to the file and its
extended attributes only until
closing it.
For PRINTERS a user has "Print"
permissions. Can submit print jobs.
D (Delete) User can delete files and
subdirectories within the
shared directory but cannot
delete the shared directory
itself.
X (Execute) User can run a file (but not
read or copy it). X
permission is not needed if R
permission is assigned to the
user for that directory or
file. R permission includes
all rights that X permission
grants. DOS clients
recognize X permission. For
clients running DOS versions
earlier than 5.0, files must
have R permission for the
clients to execute the files.
A (Change Attributes) User can set the physical file
flags of the file.
P (Change Permissions) For DIRECTORIES and FILES a user
change permissions for the directory
or file.
For PRINTERS a user has "Full Control"
permissions. Can administer print jobs.
"P" permissions imply "C" permissions.
Y (Yes) A user has RWCDA permissions. "Y"
serves as an abbreviation for this
set of permissions.
N (No) A user has permissions of "(none)"
and prevents the user from
accessing the directory, printer,
or file. Use this permission to
exclude individual users from
access to a directory or file,
despite whatever permissions
are assigned to the groups to
which that user belongs. You
can assign N permission only
to individual users.
NOTE: On Solaris (TM) PC NetLink, granting any of W, C, or A
permissions results in granting of WCA combination of permissions
to the resource. Also, if the resource has W permission on it,
NET ACCESS will always show C and A permissions as well.
When assigning permissions information for a print or pipe
resource (\PRINT or \PIPE), type the resource
specification before the sharename (for example,
\\PRINT\\laser). Then set Y (Yes), N (No), and P (Change
Permissions) permissions for these non-disk resources. To
give a print resource user Y (Yes) and P (Change
Permissions) permissions, type CP as the permission string.
To give non-disk resource users these permissions, type RWCP
as the permission string.
When a server is installed, all resources are given default
permissions. To modify permissions for a resource use
the /GRANT, /CHANGE, /DELETE, and /REVOKE options.
/TRAIL specifies whether auditing of both success and failure
actions should be performed for a print resource. This option
has no effect on other types of resources.
EXAMPLES
At a UNIX system console, to grant "C" (Print) permissions for the
group "finance", "CP" (Full Control) permissions for the group
"Print Operators", and "N" (none) permission for the user "steve",
to the "dot1" printer, type the following:
net access \\print\\dot1 /grant finance:c "print operators":cp
steve:n
To run the same command remotely (on server "market_asu"), type
the following (replacing "password" with the password for
"administrator":
net admin \\market_asu password /command net access
c:/tmp/status /change jennyt:rw
SEE ALSO
For information about See
_____________________ _________
Getting help with network commands net help
Managing resource permissions on net perms
files, directories and shares
To get Help on command options, type "net help {command} /options | more".
To get Help one screen at a time, type "net help {command} | more".