Design question...

[JonnieStyle]

Hi all.

I've got a domain with about thirty computers connected (and various
users).
I recently installed high speed internet onto the network, and got the
ADSL, DNS and AD all talking nicely.
However, I've been asked to add two machines to the network - these
machines need to share folder with one another BUT NO ONE ELSE, and
they need internet access and access to certain folders on the server.

What is the best way to tackle this? Do I put these two machines on a
seperate subnet, but have their DNS and gateway point to the original
network? The users of these machines don't want to have to have every
folder password protected, but still want full access between machines
but not on the domain...

I'd like to do this as efficiently as possible! Thanks for the
replies (in advance!)

Jon

 

[UKTec2]

Hi Jon,
Personally I would setup a share on your server, remove the default
permissions and replace them with specifying the individuals you want to
have access as well as domainadmin.
If your running a logon script add a test for the users and if found map the
drives out, in fact the test should also delete any mapping that already
exists just in case someone else logs onto the same pc.
How's that for starters

uktec2

 

[Cary Shultz [A.D. MVP]]

Good morning,

Just to add on to what UKTec2 suggested: I would create a local security
group - call it lsg_whatever - and then create a global security group -
call it gsg_whatever - and then add those two or three user account objects
to the global security group. Then add the global security group to the
local security group. Finally, apply your permissions to the local security
group.

HTH,

Cary

 

[JonnieStyle]

I'll give it a shot. Thanks so much for the advice. Cheers.

 

[Cary Shultz [A.D. MVP]]

Glad to help. It is strongly suggested that you apply permissions to the
local security group while making the users members of global security
groups and placing those global security groups inside the local security
groups. It does not always happen in the real world like this but it really
should.

Cary

I'll give it a shot. Thanks so much for the advice. Cheers.


"Cary Shultz [A.D. MVP]" <[email protected]> wrote in message

Good morning,

Just to add on to what UKTec2 suggested: I would create a local security
group - call it lsg_whatever - and then create a global security group -
call it gsg_whatever - and then add those two or three user account objects
to the global security group. Then add the global security group to the
local security group. Finally, apply your permissions to the local security
group.

HTH,

Cary

map
the