Re: Using a Group Policy in an XP Workgroup

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 06/26/05

  • Next message: Gazza: "Software restrictions"
    Date: Sun, 26 Jun 2005 11:07:01 -0400
    
    

    In news:5D4CBEB4-2BF3-4DD2-990E-982E6AE4D16B@microsoft.com,
    David M <DavidM@discussions.microsoft.com> typed:
    > Thanks Colin & thanks Doug
    >
    > You are correct in saying that I wantng to put permissions in place
    > for files and shares.
    >
    > I have done a bunch of research and I am coming to the conclusion
    > that I really need a domain. I actually have a copy of SBS 2003 and I
    > suppose I have tended not to deploy that because I am not a techie
    > type and was afraid that the level of complexity in setting up and
    > maintaining would be too great.
    >
    > Do you know how hard it would be for me to implement SBS 2003?

    I suggest you look for a consultant to do the setup for you. A *good*
    consultant who has done a lot of these setups - get references. SBS has tons
    of wizards that will walk you through the setup, but there is still a lot to
    know - and wizards should be viewed as a timesaver, not a substitute for
    knowlege.

    Invest in good hardware for your server, too, or it doesn't matter how well
    you set things up. Hardware SCSI RAID, 1GB RAM, UPS, tape drive....those are
    all mandatory for servers in my view, even on small networks.

    The consultant can show you how to do any day-to-day admin, too.

    Note that the best newsgroup for SBS help is in
    microsoft.public.windows.server.sbs - there are a lot of very smart &
    friendly people in there, and I am sure you'll get a ton of information.

    >
    >
    >>
    >> "David M" <DavidM@discussions.microsoft.com> wrote in message
    >> news:EF3EAE7A-5DE6-4491-8C6D-DB7A7166860F@microsoft.com...
    >>> I have a small office network all on XP Pro and all in the same
    >>> Workgroup. I
    >>> do not run Active Server Directory and do not operate a Domain.
    >>>
    >>> Two of the PC's operate as file servers. I want to manage access to
    >>> folders
    >>> on the file servers by allowing certain groups and not others.
    >>>
    >>> I want the members of the Groups to be Workgroup PC's. In other
    >>> words, whomever is logged on to the PC will have access to the
    >>> folders.
    >>>
    >>> I would also consider using Users as the members of a Group if I
    >>> could work
    >>> out an easy way to create a single user entity for each employee
    >>> that could
    >>> operate across the whole Workgroup.
    >>>
    >>> I know how to add in snap-ins to MMC on the file servers but am not
    >>> sure which ones to add and how to configure them to achieve the
    >>> above.
    >>>
    >>> Any help would be appreciated.
    >>>
    >>> --
    >>>
    >>> David M
    >>
    >> Sounds like you are asking how to put permissions on files and
    >> shares. This isn't really a Group Policy thing. See
    >> http://support.microsoft.com/default.aspx?scid=kb;en-us;308418 for
    >> info. Also see http://support.microsoft.com/?kbid=290403 (you may
    >> need to change XP's default behavior of authenticating as a guest
    >> while installed in a workgroup.)
    >>
    >> Without a domain, you will need matching accounts on all PCs for all
    >> users (same names+password) - this means that if the users all have
    >> their own accounts, you could have a lot of work to do to keep
    >> things in sync. It would be simplified if everyone just used a
    >> generic "user" account on each PC (in fact, you could set up Windows
    >> to automatically log on with that account.)
    >>
    >> If there's nobody else on the network, and you don't want to be very
    >> granular (i.e. Bob can access FolderA, Susan can read FolderA but
    >> not make changes, but she can do anything on FolderB) you could just
    >> set your permissions to allow "Everyone"
    >>
    >> As for " I could work out an easy way to create a single user entity
    >> for each employee that could operate across the whole Workgroup." -
    >> you have basically described one of the main reasons for getting
    >> domain. Microsoft does have a Server product designed (and priced)
    >> for smaller environments that allows you to set up a domain. Small
    >> Business Server 2003:
    >> http://www.microsoft.com/windowsserver2003/sbs/default.mspx (no I
    >> don't work for them and I'm not trying to sell it to you!!, just
    >> making sure you know that there is a product.)
    >>
    >>
    >> --
    >> Colin Nash
    >> Microsoft MVP
    >> Windows Shell/User


  • Next message: Gazza: "Software restrictions"

    Relevant Pages

    • Re: Baffelling RWW problem
      ... "special permissions" and all is good in RWW land. ... Check the configuration on SBS server and client computer as following: ... your ISP DNS server IP should be ...
      (microsoft.public.windows.server.sbs)
    • Re: Fax service failing to send faxes out? Receives ok.
      ... The default fax permission for SBS server is listed as following, ... SBS Fax Operators: Allow - Fax, ... Special Permissions - Allow - Submit Low Priority Fax, ... Click Services tab and select Hide All Microsoft Services and Disable ...
      (microsoft.public.windows.server.sbs)
    • RE: Thousands of 10016 Errors
      ... In the Launch Permission dialog box, ... In the Permissions for NETWORK SERVICE list, ... This is a known issue if you install ePolicy Orchestrator Agent on SBS. ... click to check the "Hide All Microsoft Services" ...
      (microsoft.public.windows.server.sbs)
    • Re: login/logoff Report
      ... Share/NTS Permissions ... Make sure you're logged onto the SBS server as a domain admin. ... In the section marked "Permissions for Domain Users", ...
      (microsoft.public.windows.server.sbs)
    • Re: Migrating user profile information
      ... Please check as follows to reset the permissions issue: ... If you have not joined the client computer into SBS domain, ... folder private" is still available for the user profile folder. ...
      (microsoft.public.windows.server.sbs)