Adding a windows 2003 server to a windows 2000 network

[Harry]

I have two computer running in a network currently.
I want to add a window 2003 server -- basically as a file server.

However, I having problems doing this. Any ideas on what it takes
to add win2003 server to my win2K network?

I would also like to use ZoneAlarm but I hear it is not recommended
with windows 2003 server. Is anyone else using ZoneAlarm with windows 2003
server without problems? I'm just trying to keep my network as secure
as possible.

 

[Phillip Windell]

Security is not synonymous with "firewall". Ditch ZA on the Server if this
is a private network. Firewalls should be at the network edge and not
throughout the network on every machine. Personal firewalls running on
individual machines (ZA) are fine for home users connected directly to their
Cable/DSL or Dialup modems, but on a LAN they usually stop everything in its
tracks,...then nothing works. You base security methods on the environment
that the machines runs in.

If it is a file server then most of the security is focused on the NTFS
permission of the files you want it to make available. All other
non-required or non-used services should either be shutdown or not
installed. You can run a quality AV product on the machine to protect from
Viruses, Worms, Trojans, etc.

 

[Richard G. Harper]

(I seem to be saying this a lot tonight <G>)

I agree with Phillip on his firewall assessment.

As for joining the domain - why can't you? I have a couple Windows 2003
servers that are members of a Windows 2000 AD domain. If the firewall is on
the server that is likely the first cause of your problems, uninstall it
(don't disable it, UNINSTALL it). If the server still won't join the domain
please look into your event logs and post back with details of any errors.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

 

[Phillip Windell]

(I seem to be saying this a lot tonight <G>)

I agree with Phillip on his firewall assessment.

Glad I'm not alone! I feel cold and lonely sometimes..

 

[Richard G. Harper]

BTDT - got the MVP award to prove it. <G>

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

 

[Harry]

OK, thanks a lot for the advice. I've now addedmy windows 2003 server.
Basically I need to add users who will all have access to one directory only
and any subdirectories within it.

Is the most secure process to;
1. Disable sharing except for the 1 folder with subdirectories on the server.
2. Then download files from to users who will have access to the server.
Am I correct in thinking that if I do this not one can gain access to
my computers from my server - since they will be restricted to 1 folder?

Are there any user management programs that work with windows 2003 server
that make handling dozens or hundreds of user names and passwords easy?

Harry

Security is not synonymous with "firewall". Ditch ZA on the Server if this
is a private network. Firewalls should be at the network edge and not
throughout the network on every machine. Personal firewalls running on
individual machines (ZA) are fine for home users connected directly to their
Cable/DSL or Dialup modems, but on a LAN they usually stop everything in its
tracks,...then nothing works. You base security methods on the environment
that the machines runs in.

If it is a file server then most of the security is focused on the NTFS
permission of the files you want it to make available. All other
non-required or non-used services should either be shutdown or not
installed. You can run a quality AV product on the machine to protect from
Viruses, Worms, Trojans, etc.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

I have two computer running in a network currently.
I want to add a window 2003 server -- basically as a file server.

However, I having problems doing this. Any ideas on what it takes
to add win2003 server to my win2K network?

I would also like to use ZoneAlarm but I hear it is not recommended
with windows 2003 server. Is anyone else using ZoneAlarm with windows 2003
server without problems? I'm just trying to keep my network as secure
as possible.

 

[Richard G. Harper]

Yes, there is a way to centralize user rights and account information and
it's called "Active Directory".

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

OK, thanks a lot for the advice. I've now addedmy windows 2003 server.
Basically I need to add users who will all have access to one directory
only
and any subdirectories within it.

Is the most secure process to;
1. Disable sharing except for the 1 folder with subdirectories on the
server.
2. Then download files from to users who will have access to the server.
Am I correct in thinking that if I do this not one can gain access to
my computers from my server - since they will be restricted to 1 folder?

Are there any user management programs that work with windows 2003 server
that make handling dozens or hundreds of user names and passwords easy?

Harry

Security is not synonymous with "firewall". Ditch ZA on the Server if
this
is a private network. Firewalls should be at the network edge and not
throughout the network on every machine. Personal firewalls running on
individual machines (ZA) are fine for home users connected directly to
their
Cable/DSL or Dialup modems, but on a LAN they usually stop everything in
its
tracks,...then nothing works. You base security methods on the
environment
that the machines runs in.

If it is a file server then most of the security is focused on the NTFS
permission of the files you want it to make available. All other
non-required or non-used services should either be shutdown or not
installed. You can run a quality AV product on the machine to protect
from
Viruses, Worms, Trojans, etc.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

I have two computer running in a network currently.
I want to add a window 2003 server -- basically as a file server.

However, I having problems doing this. Any ideas on what it takes
to add win2003 server to my win2K network?

I would also like to use ZoneAlarm but I hear it is not recommended
with windows 2003 server. Is anyone else using ZoneAlarm with windows 2003
server without problems? I'm just trying to keep my network as secure
as possible.

 

[Phillip Windell]

Is the most secure process to;
1. Disable sharing except for the 1 folder with subdirectories on the

server.

I'm afraid that would screw things up in a hurry. You don't disable
anything. Aside from the default system shares that are required for normal
operation, nothing isshared on a server that you don't do yourself. So if
you didn't do it, it isn't shared.

2. Then download files from to users who will have access to the server.
Am I correct in thinking that if I do this not one can gain access to
my computers from my server - since they will be restricted to 1 folder?

Copy the files they need to the right share.

Are there any user management programs that work with windows 2003 server
that make handling dozens or hundreds of user names and passwords easy?

Why would you need third-party tools for that? That would be like buying a
car and then have to buy the steeringwheel separately.

 

[Harry]

Thanks for all your comments. One more question.

I've been automatically uploading files via ftp to my website --
but now I need to download files almost every minutes to a
file server I'm setting up. My win2k computers in the network have
access to my win 2003 server but I did not give it access to my
computers.

I can now download individual files but not directories.

What's the easiest way to download "directories" from my computers
to my file server?

Harry