Use Computer name or OU to authenticate for file share

[jhpolk]

I have a computer lab in our College library. Currently they are using the same login user and pass for every computer. We have a login script for the maping of the share based on the user.
We are installing a new printing system the requires that every user uses their own user and password. The library staff want to keep other labs from accessing the file share at this time. We have all the computers(Win XP Pro) ,server(Win 2008) and users on Active Directory, each in there own OU.
Is there a way I can set the file share on the windows 2008 server to accept authentication for the computer instead of the user.
Are there other work arounds that I can try?

Thanks ahead for any help.

 

[kmcferrin]

First, get some training on AD. Seriously. There's no reason for every user and computer to have it's own OU. That's just madness.

Secondly, create a group that will be used to access the share. Grant that group access to the share. Put the users who will need access to the share into that group. Do not put users into that group who will not use the share.

Problem solved.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCSE:Security 2003
MCITP:Server Administrator
MCITP:Enterprise Administrator
MCITP:Virtualization Administrator 2008 R2
Certified Quest vWorkspace Administrator

 

[jhpolk]

There's no reason for every user and computer to have it's own OU

Sorry if I was not clear. All the Compters(90) in the Lab are in One computer OU and All the Users(5000+) are in One OU. All users will need to have access to the computers lab, but I want to restrict computer in other areas from accessing the file share.

Option I am currently looking at:
1 Create a local login script using an alternet athenication to the share.(Looks like my best option right now.)
2 New sub net for lab- requires firewall rules and vlan creation plus some other minor things. (Good for security, bad for some future plan we have.)
3 Format the share drive (OOPS) no more problem.(lol)

 

[baddos]

You can give computers access to a share, but the problem with that is that it would only work for access under the system account. So a use logging into that computer wouldn't necessarily have access to the network share.

The best way to do this would be to create a group and add all these users to that group and then specify that only that group has access to the share through the share permissions. It's probably best to do that anyways, as then you can use group policy preferences easier to automatically map the drives eliminating the need for your login script.