Welcome To The Home Of The Visual FoxPro Experts  
home. signup. forum. archives. search. google. articles. downloads. faq. members. weblogs. file info. rss.
 From: David Mustakim
  Where is David Mustakim?
 Jakarta
 Indonesia
 David Mustakim
 To: Pete Sass
  Where is Pete Sass?
 Marathon, Ontario
 Canada
 Pete Sass
 Tags
Subject: RE: apply active directory to a menu system
Thread ID: 393609 Message ID: 393694 # Views: 39 # Ratings: 0
Version: Visual FoxPro 6 Category: Active Directory
Date: Sunday, December 22, 2013 12:03:21 AM         
   


> >
> > How do you synchronize the active directory to the application or how do incorporate the access rights and levels
> > in the vfp6 application to the active directory.
> >
> > Please I'm new to the active directory , reading on it.
> >
> > Please provide an exhaustive example which explains this request.
>
>
> Hi,
>
> I cannot provide you an exhaustive example as at this point you have not told us what you want to do
> with your VFP menus as it relates to active directory.
>
> Maybe this simplistic explanation will help you.
> Think of active directory no different than a centralized database holding information on:
> - Users that login and what they should have permission and access into.
> - The access into could be application or could be folders and or files residing inside an active directory
> network.
> - in very simple and basic terms this is generally setup in AD by creating user groups and putting user
> login accounts "their Login ID information inside of an AD group.
> - You allow or deny network recourses to the groups via AD configuration settings.
> - Thus a group that is allowed access to a folder location or an application means generally no other users
> unless those belonging to this group can have access to the folder or application, etc.
> - AD works on the principal that denial takes precedent. So this means generally in a stock AD installation
> things are totally locked down and you work on allowing users access to resources rather than everyone has
> access to everything and you do around denying access permissions.
>
> So in your question if someone wanted to create a VFP application that as an example could only be run
> by me and you in a 350 user based AD network, I would do the following.
> Let's say my VFP application is called "AutoShop POS"
> I could create an AD group called "AutoShop" and make your login account and my login account members of
> the "AutoShop" group.
> Running of this application is denied unless you are a member of the "AutoShop" group.
> Once this is setup, only you and I have access to run the "AutoShop" application.
>
> Now here you need to understand that in an AD domain a workstation when initially installed by the IT
> person, he/she during the installation joins the AD domain. Now this computer is also a member of the
> AD much like a user is, but not exactly in the same way - lol
>
> Now you have all the users and computers and by the way other servers in AD and all are now AD objects.
> So you can now set allow / deny permissions at a group level and machine level. This provides for very
> granular permission configurations.
>
> Now the user logins into the domain on their workstation and thus now authenticates to one of the
> domain controllers, generally there are two kept in sync via a scheduled replication process.
> So once this is done, event if the application is being run locally on a workstation, AD has ties
> now directly into all the permissions on this workstation and even a locally running app can be
> denied via AD security policies.
>
> So generally this is the kind of thing you could do in an AD domain.
> Now you mention VFP menus?
>
> Now that you have a brief explanation of AD I ask you again:
> What do you want to end up with in the end?
> If you do not know, ask your client? What do they want to achieve in the end with the application
> and how it relates to Active Directory?
>
> Pete "the IceMan", from the Great White North of Canada.
> www.marathongriffincomputers.com


Message ID: 393693

David

ENTIRE THREAD

apply active directory to a menu system Posted by DEREK DODOO @ 12/20/2013 4:00:04 PM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/20/2013 4:12:52 PM
RE: apply active directory to a menu system Posted by Pete Sass @ 12/20/2013 7:04:25 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/20/2013 7:26:19 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/20/2013 8:15:32 PM
RE: apply active directory to a menu system Posted by Pete Sass @ 12/20/2013 11:31:54 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/21/2013 10:50:20 AM
RE: apply active directory to a menu system Posted by Pete Sass @ 12/21/2013 3:04:58 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/22/2013 12:03:21 AM
RE: apply active directory to a menu system Posted by Anders Altberg @ 12/21/2013 12:42:10 AM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/21/2013 9:47:22 AM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/21/2013 10:34:03 AM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/21/2013 4:06:02 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/22/2013 12:00:56 AM
RE: apply active directory to a menu system Posted by Koen Piller @ 12/22/2013 11:37:50 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 12:07:17 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 12:47:08 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 1:06:19 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 1:21:25 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 2:46:15 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 5:18:30 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 5:41:04 AM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/23/2013 6:56:01 AM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/23/2013 3:02:13 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/26/2013 9:44:56 PM
RE: apply active directory to a menu system Posted by DEREK DODOO @ 12/26/2013 9:46:27 PM
RE: apply active directory to a menu system Posted by Jun Tangunan @ 12/26/2013 11:31:55 PM
RE: apply active directory to a menu system Posted by David Mustakim @ 12/27/2013 3:05:57 AM