W2K Server Security

I recently upgraded my server to W2K. I did not make it a domain controller because the rest of our network is a Novell network and this is our only W2K server. Now I am having trouble doing any security administration. I cannot set hours and cannot get the passwords to expire. If I set the password to expire, it just disables the user and locks them out. Also, under the “Security Template” there are about 14 different places to set up security. Which one does what? Maybe you could just suggest a good book for server administration.