Print

Print


Hi,

As a rule, I believe that a managed environment is less problematic than
an unmanaged environment. With this in mind, I would need the answer to
a couple of questions before I could give a proper answer.

1. Is there another managed environment available to these users? If
there is another domain they could become (or are) a part of, then I
would make this a member server of that domain. If the users insist on
some removal from that environment, then place them in a separate OU. If
there is not, then I would set this machine up as a domain controller.

2. Is there some technical, or political, reason not to setup a domain?
With the default inclination to put everyone in a domain, with as few
domains (ideally 1) as possible, I would attempt to resolve this problem
many times, before giving up on a domain.

There are a couple of reasons I would setup a domain. 
1. Permissions on file shares are easier. With a domain, a user only has
to login to the domain once to get access to every item they have access
to in the domain. Without this setup, you will have to be careful in the
setup of the accounts so that they do not have to remember several
passwords. Even with this it is not unlikely that they will have to
login twice (once to their machine, once to the server).

2. Security can be more readily controlled. Setting up expiring
passwords, and other security measures is possible with a domain, but
very difficult to setup without.

I understand that this is a small group. That is why my first suggestion
would be to have them join a larger domain. Assuming that is not
possible for some reason, then I would set up a small domain for them
before I would let them run on their own.

+-------------------------------------------+
|            Michael Surato                 |
|      Resource Center for Persons          |
|           with Disabilities               |
|      Michigan State University            |
|            120 Bessey Hall                |
|        East Lansing, MI 48824             |
| Voice: (517) 353-9643 Fax: (517) 432-3191 |
+-------------------------------------------+ 
   

> -----Original Message-----
> From: MSU Network Administrators Group 
> [mailto:[log in to unmask]] On Behalf Of Cheryl Akers
> Sent: Tuesday, April 11, 2006 7:49 AM
> To: [log in to unmask]
> Subject: [MSUNAG] Need file server or domain controller
> 
> I'm setting up a Windows 2003 server for a 10 person group.  
> They will just be sharing files and the majority if their 
> work will be done using their local computer files.  My 
> inclination is to just set it up as a simple file server, and 
> not as a domain controller (i.e no Active Directory).  Am I 
> missing something by not using a domain controller instead?
> Cheryl
> 
> Cheryl Akers, MS, CNA - [log in to unmask]
> Microcomputer Support - Microbiology and Molecular Genetics 
> 2228C Biomedical Physical Sciences Michigan State University 
> East Lansing, MI  48824
> 
> 517-355-6463 X1514
> 
> "I try to take one day at a time, but sometimes, several days 
> attack me at once."
> Jennifer Unlimited
>