Creating users

[Guest]

I am setting up local users on a w2k server for file sharing purposes in a
peer-to-peer network. When I create a new user the user is automatically
created in the local Users group. When I add the user to another group to
give more permissions such as Administrator or Power User the user remains in
the Users group as well. My question is ....Is it ok for a user to be a
member of multiple groups or should I remove membership until the user is
only part of one group? I have not run into any problems but I would like to
have it setup properly. Thanks in advance for any help.

 

[Lanwench [MVP - Exchange]]

I am setting up local users on a w2k server for file sharing purposes
in a peer-to-peer network. When I create a new user the user is
automatically created in the local Users group. When I add the user
to another group to give more permissions such as Administrator or
Power User the user remains in the Users group as well. My question
is ....Is it ok for a user to be a member of multiple groups or
should I remove membership until the user is only part of one group?
I have not run into any problems but I would like to have it setup
properly. Thanks in advance for any help.

They will be and should remain members of users as well. This doesn't
represent a problem unless you're doing tricky stuff with permissions & plan
to explicitly deny access to the Users group for anything - and yet want a
specific user to have more permissions.
OT, but how many computers on this network? If it's more than a small
handful, why not set up a domain so you can use all the centralized security
stuff? There's no additional cost...

 

[Bruce Chambers]

I am setting up local users on a w2k server for file sharing purposes in a
peer-to-peer network. When I create a new user the user is automatically
created in the local Users group. When I add the user to another group to
give more permissions such as Administrator or Power User the user remains in
the Users group as well. My question is ....Is it ok for a user to be a
member of multiple groups or should I remove membership until the user is
only part of one group? I have not run into any problems but I would like to
have it setup properly. Thanks in advance for any help.

There's no problem created by assigning a to multiple groups. In fact,
that's the normal procedure. Permissions to individual shares are
assigned to specific groups, and then users are added to, or removed
from, only those groups necessary to grant them the access needed,
without having to grant them access to everything.

I should point out, however, that granting anyone but the Network
Administrator admin permissions to a server is normally very unwise.
Are the users you're adding to this group qualified and trustworthy?


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Guest]

They will be and should remain members of users as well. This doesn't
represent a problem unless you're doing tricky stuff with permissions & plan
to explicitly deny access to the Users group for anything - and yet want a
specific user to have more permissions.
OT, but how many computers on this network? If it's more than a small
handful, why not set up a domain so you can use all the centralized security
stuff? There's no additional cost...

I won't give admin rights to anyone I was just using that as an example,
thanks for the advice though ....I need it. As far as a domain I have less
than 4 machines, so running things doesn't seem to be so bad yet. Our network
is for a small store and unless we move to a new building things won't get
much bigger. To be honest with you my knowledge of setting up a domain is
limited as well. I know that's not a great excuse but I've been learning so
in the future it's definitely a possibility. Thanks so much for all your help.

 

[Lanwench [MVP - Exchange]]

I won't give admin rights to anyone I was just using that as an
example, thanks for the advice though ....I need it. As far as a
domain I have less than 4 machines, so running things doesn't seem to
be so bad yet. Our network is for a small store and unless we move to
a new building things won't get much bigger. To be honest with you my
knowledge of setting up a domain is limited as well. I know that's
not a great excuse but I've been learning so in the future it's
definitely a possibility. Thanks so much for all your help.

No prob - hope it helps.