In article , GS wrote:
I agree in general, but I thought Active Directory availed more fine
control via Group Policy implementation.

Another option is to implement a repository where access/permissions
can be controlled in a more granular fashion. One example is PDM Works,
where users must login/logout files. What they're allowed to do with
the files can be controlled to a very fine-grained set of rules.

... so is that a product you have to buy form a non MS supplier ?
Seems crazy to me that the MS system doesn't come with an easy way to set
permissions ... but there you go. :)