Types of groups an NTFS user can be part of

When a user logs into a workplace in a Windows domain he works with a series of permissions which the operating system determins on the basis of the information contained in Active Directory. The user can be a member of various groups holding permissions. These groups can again contain other groups. Furthermore, there are workplace-dependent (so-called local) groups.

On account of this possibility of group definitions it can be difficult to determine the effective permissions of any one user.

With Parks Authorization Manager (PAM) the groups which a chosen user holds for a particular workplace can be displayed immediately after logging in.

How PAM lets you see group memberships in one glance

The groups are hierarchically displayed so that memberships are recognisable. Furthermore, a distinction is made between local groups and domain groups.