Re: User permissions - Server 2003

First of all, remove all users from domain admins. This is a MAJOR security breach.

You can deny users access to machines except their own in Active Directory Users and Computers (properties of the user).

Create a home folder on the AD machine, share it with full permissions to everyone, and again under properies of the users in ADUC put \\server\home\%username% in the home folders box. (NTFS permissions will not let users browse eachtohers directories).

Check out the 70-290 book from microsoft press, it contains alot of useful information about what you are asking.

http://www.microsoft.com/MSPress/books/6469.asp

/daniel heimburg

DSEDM skrev: 
I am new to setting up Server 2003, please bear with me.

I have A.D. installed and have created my user accounts which reside in logicaly named O.U.'s. I have joined all of the machines (28 of them) to the domain.

All of the user accounts I have given Domain Admin permissions (on a temporary basis.)

I worked of off a server a few years back that had security in place that I would like to duplicate, but alas I do not know how to set this up.

What I want to setup is this:

1.) When the users browse the network I want them Denied Access to all machines except their own.

2.) I have a shared Home directory on the server with departmental type folders residing within. (Eg: Warehouse, Mill, Geology ...etc) I want to apply permissions to these folders so that one deptartments users cannot go wandering through the others data.)

Right now if a user logs on over at the warehouse the user can browse to the machines on the network and access them. I have removed all shares from all machines so all the see is the Task Schedule and shared printer if applicable.

The users can also go to the Home directory and browse through all of the others folders. I understand that I must create user groups and then apply permissions to that group...but do I use Group Policy to do this ?

I would love dearly to know how to set this server up properly but am short in the knowledge dept, From what I have been reading on this site this should be an easy post for most of the techs.

Thanks for all the help.






.

Relevant Pages

  • Re: User permissions - Server 2003
    ... Home folder box Domain Admin was removed from the account and Domain User has been left in place. ... You can deny users access to machines except their own in Active Directory Users and Computers. ... (NTFS permissions will not let users browse eachtohers directories). ... I have a shared Home directory on the server with departmental type folders residing within. ...
    (microsoft.public.windows.server.general)
  • Re: How to modify program files in Vista?
    ... create it within HKLM and change the permissions. ... INI files have the advantage that most users with access to notepad can ... Security policies ... We were writing a module that validated device drivers found on target machines against ...
    (microsoft.public.vc.mfc)
  • Re: Problem connecting two windows XP compiters in a simple workgroup
    ... If you can see the folders but cannot access them, ... turn off simple file sharing. ... set NTFS permissions on ... > machines, also firewalls off for anti-virus software on both machines). ...
    (microsoft.public.win2000.networking)
  • Re: Windows user controls in a web page: Security
    ... I then tried on more machines (I was using 3 real ... Create a windows user control, ... Select the permissions your control will need and then click "Add ... use "URL", for example, to only authorize assemblies coming from one URL. ...
    (microsoft.public.dotnet.security)
  • Re: Publishing Software...
    ... I may have to recant my thoughts about it being a permissions issue, ... domain workstation security policy and then lock it down and reapply that. ... >> Are the users on the machines in question, members of the local Administrators group?? ... >> User Rights configuration was completed with one or more errors. ...
    (microsoft.public.windows.server.sbs)
Loading