The Active Directory domain has separate groups for two departments - UsersGr1 and UsersGr2. Both departments are run by one manager; his user account Boss is included in both groups.
What will you do to allow full access to a folder stored on a Windows Server 2003 file server for the manager, make it available in read-only mode for UsersGr1 and block it for UsersGr2?
