Locking down User Permissions

[sqleptical]

I am running NT 4.0 on a server & Windows 98 on the users' workstations. How can I lock the users out of network files and system properties/control panel? Right now the users' logins can do the same things/have the same permissions as the system administrators' login!

 

[FilthPig]

That's a pretty broad topic. I'll try to at least point you in the right direction.

Network files (assuming the volume is formatted using NTFS), have permissions assigned to them, which an administrator can view by right-clicking and choosing properties, and looking at the Security tab. If you click on Permissions, you can edit who can access the files, and what type of access (read, write, etc) they have. For basic functions, it's pretty straight-forward and self-explanitory when you get in there.

By nature, Win98 is not very friendly with respect to security. It may not be an option, but if you're looking for security you're best bet is upgrading the workstations to NT or (even better) 2000. If your server is set up as a domain controller, you can apply policies to all machines that log into the domain and control what they can and can not access. Again, this is a very broad subject, which leads me to my next suggestion.

'Mastering Windows NT Server 4' by Mark Minasi is a great book, and covers all of these topics in detail, and it's easy to read. I would highly recommend you get it.

http://www.amazon.com/exec/obidos/A...4754/sr=8-4/ref=sr_8_71_4/103-8829911-2708653

Marc Creviere

 

[sqleptical]

Thank you for your reponse. You're right, with windows 98 I don't have the options for right-clicking folders for read-write-execute permissions. I have however through policy editor and Tweak UI been able to lock just about everything down. The only hole I seem to have left is the 'new' option when the user right clicks the desktop and selects folder or shortcut, they are able to explore the network. Any Ideas? Thanks again for your help.