Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account


Photo

Windows Server 2008 with WinXP/Win7 clients


  • Please log in to reply
1 reply to this topic

#1
eljainc

eljainc
  • Member
  • 1 posts
  • OS:none specified
  • Country: Country Flag
Hello,

I provide IT support to a small medical clinic. The way their Windows Server 2008 R2 has been set up is without a domain. We basically have been using it
in "workgroup" mode. This has worked okay for the most part. What I need to do now is create user accounts/permissions. I have installed ADDS, but
it seems this may not work for us in the end for the following reason: The clients are Windows XP Home, and several are Windows 7 Premium. There are
no "Professional, Ultimate, or Enterprise" clients on this network.

I want to be able to set up sharing and permissions so that certain users have only rights to public folders, but not to clinic sensive documents which
a rogue employee could sabotage or delete if they were so inclined.

Currently the data volume (F:) has the permissions for the "Everyone" group and all rights (Full control, read, write, etc). This is obviously not good.


Again, as I mentioned, I have created users (i.e. director, frontdesk1, frontdesk2, etc). How do I tie the WinXP/Win7 clients to these user names and accounts. Do
I actually need to create user accounts on the server so that I can "lock down" folders and permissions? I'm thinking this might be the way to go.

Please chime in with any comments or suggestions.

Thanks
Mike


How to remove advertisement from MSFN

#2
Tripredacus

Tripredacus

    K-Mart-ian Legend

  • Super Moderator
  • 9,769 posts
  • OS:Server 2012
  • Country: Country Flag

Donator

Well the first thing is that those computers need to get up to either Pro or Enterprise levels. Its always a headscratcher when you see companies taking shortcuts or making uninformed decisions when it comes to IT. If this company is in the United States, then you are bound by HIPAA regulations regarding the data. I wouldn't be taking any shortcuts.

Regarding your question in general, you can assign the local accounts (of the physical computers) permissions on the server share. Basically, go into your share properties and add a user. Type in COMPUTERNAME\USERNAME where the computer name is the actual name of the client PC, and the user name is the local account on that client PC.

I would definately recommend actually using Active Directory there but those client computers are a problem.
MSFN RULES | GimageX HTA for PE 3-5 | lol probloms
msfn2_zpsc37c7153.jpg




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users



How to remove advertisement from MSFN