XP Network - Workgroup or Domain

[Brian]

Apologies if this is in the wrong newsgroup and/or long
winded...

HISTORY
I run a small office that has 4 desktops and 1 laptop
running XP Pro plus another desktop that has to run
W2000. These machines are networked into a hub and then a
Draytek router for our broadband connection. One of the
desktops is being used as a 'server' (loose term).

PROBLEMS
Staff have full access to files on the server, they save
files to their own PC, which makes centralised backups
impossible, they waste time surfing the internet, funny
emails are forwarded to everyone (bandwidth?) and I have
no way of knowing what has been
accessed/amended/printed/copied etc. etc.

The network does operate fine as it is but I would like
to 'lock' the network down so to speak. I've converted
all hard drives to NTFS, removed 'simple file sharing'
and activated 'security logging' on 'Audit Object Access'
in the 'Local Policies'. What next?

FUTURE
I'd like to build a dedicated file server running Small
Business Server 2003 with all the goodies but for now, I
have to make the best of what I have available...

Does anybody have any suggestions or some useful URL's to
point me to?

Thanks
Brian.

 

[Lanwench [MVP - Exchange]]

Apologies if this is in the wrong newsgroup and/or long
winded...

HISTORY
I run a small office that has 4 desktops and 1 laptop
running XP Pro plus another desktop that has to run
W2000. These machines are networked into a hub and then a
Draytek router for our broadband connection. One of the
desktops is being used as a 'server' (loose term).

So is all data stored there? Will make your client/server migration a lot
easier if so....

PROBLEMS
Staff have full access to files on the server, they save
files to their own PC, which makes centralised backups
impossible, they waste time surfing the internet, funny
emails are forwarded to everyone (bandwidth?) and I have
no way of knowing what has been
accessed/amended/printed/copied etc. etc.

Hard to change much without a domain....if you get SBS, at least the
internal e-mail won't be sucking your Internet bandwidth at all. You should
redirect each user's My Documents to the "server" share(s)....

The network does operate fine as it is but I would like
to 'lock' the network down so to speak. I've converted
all hard drives to NTFS, removed 'simple file sharing'
and activated 'security logging' on 'Audit Object Access'
in the 'Local Policies'. What next?

Take all users out of the local admin groups, for a start....

FUTURE
I'd like to build a dedicated file server running Small
Business Server 2003 with all the goodies but for now, I
have to make the best of what I have available...

How long will it be before you can do this?

 

[Brian]

-----Original Message-----


So is all data stored there? Will make your client/server migration a lot
easier if so....

All data files are supposed to be saved on the server but
I wouldn't like to bet on it

Hard to change much without a domain....if you get SBS, at least the
internal e-mail won't be sucking your Internet bandwidth at all. You should
redirect each user's My Documents to the "server" share

(s)....

Can I set a 'Domain' up on my current configuration or is
that only available with server software? I tried to
find 'Folder Redirection' after adding a 'snap in' but
it's not listed for some reason!

Take all users out of the local admin groups, for a

start....

Yep, done that - just me and 1 trusted Manager have Admin
rights.

How long will it be before you can do this?

Hopefully this year but it depends on the IT Budget

Thanks
Brian.

 

[Lanwench [MVP - Exchange]]

All data files are supposed to be saved on the server but
I wouldn't like to bet on it

If you manually redirect My Documents on each computer to the "server"
share, and move whatever might be stored locally to that share, you'll be
pretty sure - unless they deliberately bypass it. In that case, it ain't
really a technical issue - it's a social engineering one!

Can I set a 'Domain' up on my current configuration or is
that only available with server software?

You need a server OS to create a domain.

I tried to
find 'Folder Redirection' after adding a 'snap in' but
it's not listed for some reason!

You can't do it via a policy if you aren't on a domain - but you can do it
manually.

Yep, done that - just me and 1 trusted Manager have Admin
rights.

That's a Good Thing.

Hopefully this year but it depends on the IT Budget

Yes, understood.

 

[Brian]

Snipped

If you manually redirect My Documents on each computer to the "server"
share, and move whatever might be stored locally to that share, you'll be
pretty sure - unless they deliberately bypass it. In that case, it ain't
really a technical issue - it's a social engineering one!
You can't do it via a policy if you aren't on a domain - but you can do it
manually.

Ok, thanks for the info so far. A 'manual redirection'
sounds like what I need to do. Where do I start?

I formatted my 'Windows ME laptop yesterday after backing
everything up to an external hard drive. I converted the
drive to NTFS, installed XP Pro, spent hours on Windows
Update and then installed Office XP Pro. Today, I tried
to copy my email account settings (.aif files) without
success. I'm wondering if Address book, Inbox, Outbox, IE
Favourites, Cookies etc can be redirected too !

It would be great to have each PC set up with just the OS
and Programs and all data files/settings stored on the
server.

Thanks
Brian.

 

[Lanwench [MVP - Exchange]]

Snipped


Ok, thanks for the info so far. A 'manual redirection'
sounds like what I need to do. Where do I start?

Right click on My Documents, go to properties, and either type in the path
(mapped drive or UNC) or browse to it - once you click OK it will ask you if
you want to move the existing data.

I formatted my 'Windows ME laptop yesterday after backing
everything up to an external hard drive. I converted the
drive to NTFS, installed XP Pro, spent hours on Windows
Update and then installed Office XP Pro. Today, I tried
to copy my email account settings (.aif files) without
success. I'm wondering if Address book, Inbox, Outbox, IE
Favourites, Cookies etc can be redirected too !

Nope. You can't store OE files on a non-local drive, ever. In fact, even
with OUtlook, MS doesn't recommend or support accessing PST files on a
non-local drive as it will lead to performance problems and can eventually
cause data loss - but when you get SBS you'll have Exchange, and no real
need for PST files.

It would be great to have each PC set up with just the OS
and Programs and all data files/settings stored on the
server.

That can happen when you install your domain!

 

[Brian]

-----Original Message-----


Right click on My Documents, go to properties, and either type in the path
(mapped drive or UNC) or browse to it - once you click OK it will ask you if
you want to move the existing data.

Nope. You can't store OE files on a non-local drive, ever. In fact, even
with OUtlook, MS doesn't recommend or support accessing PST files on a
non-local drive as it will lead to performance problems and can eventually
cause data loss - but when you get SBS you'll have Exchange, and no real
need for PST files.
That can happen when you install your domain!

Ah well, one step at a time eh?

Thanks
Brian.