Windows Forum

Ask something
Discussion Locked

Upgrading to User level security

0 helpful
5 replies

by sidvail

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am getting ready to install a new server, NT 4.0. I have an existing server, primary domain controller, with C drive as FAT, D drive (all data) as NTFS. It is using share level security.
New server is set up exactly the same, except as backup domain controller. I will be bringing it on line and promoting it to PDC. How do I start using User level security at that time? Must I have the groups, shares, permissions, etc. set up already? Can I? Can it be done?
Help! :)
Thanks,
Sid

5 replies

by robert schommer

You are already using "User Level" security on your sever on the NTFS drive. You are possibly just using the Administrator built-in account for everything on the server, So, Yes, it would be good to go ahead and set up your users and groups at this time.
Converting C: to NTFS will furthur secure your domain but you will need to verify that proper security is put in place after the conversion. I would suggest that you read up on permissions and access in order to verify your security after.
Check (just paste the next line in your browser)
MSKB Q214579
for information on converting to NTFS.
Good Luck

by sidvail

I set up a replica at home of our network and put it through the conversion. True, every share was set up with Everyone having permission. I setup some groups, users, etc. changed to User Level logon, and tested every combo I could think of. Worked fine.

Thanks

by @lberto

That's exactly right, this is the best time to define users, shares, and all the security stuff. It is very important that you remember that Windows NT unlikely Novell assing everyone full access to everything so it is very important that you reset all security to none, then start with assign permitions to users depending on their needs.
You as administrator are able to setup the whole server and install as much as you want but remember that give full access to all users is a very big securityhole. Remember also to give full access to the System in case you need to run application in the background, such as Antivirus, defrag or any other utility.

Good luck,

@lberto

This discussion is closed to new replies.