Solved

Everyone group in Windows 2003 server

Posted on 2006-11-21
8
1,665 Views
Last Modified: 2012-06-27
Hello there,

I have a Windows 2003 file server that has a shared folder for users' access.
We have multiple users and they login to their local Windows with the same name ( HRUser) and password.
Each window(XP) has a mapped network drive to the shared folder of the server.
We do not have a Domain Controller.

My question is regarding 'Everyone' Group.
If I remove Everyone group from the share permission of the shared folder in the server, will it be safer?

Thanks for your time.
0
Comment
Question by:JOSHUABT
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17992018
your life will get extremely hard!
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 17992023
though saying that, yes its more secure, as you can just add users you want   - best practice is share permissions = everyone full control then narrow down the NTFS permissions on sub folders
0
 

Author Comment

by:JOSHUABT
ID: 17992056
May I ask why my life will get extremely hard?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 2

Expert Comment

by:resourcepc
ID: 17992159
May I ask why you haven't made the Windows 2003 server a DC and then have everyone log into it?
0
 
LVL 16

Expert Comment

by:kshays
ID: 17992192
Oh boy, amen on that Jay!

What Jay means is that if you take away the everyone group then you will have to have the users on the clients with passwords and the same clients on the server with the same passwords essentialy.  That is way too much overhead IMHO.  You could possibly use the "guest" account, but I still wouldn't do that.  My philosophy is that if people are not in my domain then I don't want them to get any network access to my main network.  This is a totally different situation though.

If you have more than 10 workstations then I would suggest moving to a domain if possible.
0
 

Author Comment

by:JOSHUABT
ID: 17992336
To ResourcePc : We don't have a Domain Controller because of the extra cost for the license. We do have CAL for all 50 users but I think Domain User License is more expensive than regular Windows CAL. Please correct me if I'm wrong.

TO kshays : All the client PCs use the same user name to login their Windows. So I don't have to create so many user accounts in the server.

Now, will my life be still extremely hard if I remove "Everyone" group from the share permission?

Thanks for your responses.
0
 
LVL 16

Expert Comment

by:kshays
ID: 17992420
Ok.

I would just test it and see.  For what may be hard or easy for me might be different for you.  Honestly I would just remove the group from the share and put in authenticated users instead and then lock them down or modify the ntfs permissions then test, test test :)

Kevin
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17992540
Thanks kev,

you should still be able to just add the one user to that share, but honestly, i would leave as is, security obviously isnt a huge thing for you or you would have a domain
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question