Re: W2K3 and workgroup shares

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 09/23/04 

Date: Wed, 22 Sep 2004 19:32:14 -0500

In Local Users and Groups on the server create your two groups and add the
appropriate members to each group. Then when you create shares you can add the
appropriate groups with the needed permissions to the share. Make sure that the users
and everyone group is not included in the share permissions. You can also assign
permissions to printers that are being shared in the printer's properties/security.
Ntfs permissions apply to all user access to a folder while share folder permissions
apply only to network access and the two should be used together to secure a computer
and it's resources. When share and ntfs permissions are applied the most restrictive
of the two will apply to a user/group. Since you are in a workgroup, you will have to
add all the user accounts and groups to each computer offering shares or sharing a
printer. The logon name and password must be the same on all computers or access can
be denied. If a user changes their password, it will have to be changed on all
computers the user accesses or logs onto. That is the disadvantage of a workgroup. If
you had a domain controller and joined your computers to the domain then user
accounts, groups, and policies could be managed centrally on the domain
ontroller. --- Steve

"Michelle" <Michelle@discussions.microsoft.com> wrote in message
news:83EFEF16-0B49-41D8-B99D-7C4A57725189@microsoft.com...
>I have a W2K3 server with a workgroup made up of about 15 people. I need to
> divide the users up into two security groups - one that is the administrative
> group (president, secretaries, etc) and the other group would be the
> engineers.
>
> I want the Administrative group to be able to accesss all the engineers
> files and their local printers, but the Engineer group can only access files
> and local printers of others in the Engineer group.
>
> How is the best way to proceed setting this up (if it can be done at all) ?
>
> Thanks for any advice

Relevant Pages

  • Re: W2K3 and workgroup shares
    ... these guys don't logon to the server so ... > appropriate groups with the needed permissions to the share. ... The logon name and password must be the same on all computers or access can ... >> and local printers of others in the Engineer group. ...
    (microsoft.public.windows.server.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can a lone computer have Access db problems?
    ... Sorry about the loose use of the term 'edit'. ... nor was his permissions changed). ... certain computers to misbehave). ... When you say he is "authorized", that sounds as if the database is ...
    (comp.databases.ms-access)
  • Re: Inherited Permissions for Printers
    ... Local printers are by default ... http://www.chrisse.se - Active Directory Tips ... > place to "inherit permissions" on the PRINTER ... >>> 2000 Advanced Server member servers. ...
    (microsoft.public.win2000.active_directory)
  • Re: Custom rights
    ... Try giving user who is adding account View Only Exchange Administrator ... >> To add computers to the domain go to AD Users and Computers. ... you will have to manually configure permissions on that user object ... >>> Look into AD delegation, though you may need to do some custom ...
    (microsoft.public.win2000.security)