Computing.Net > Forums > Windows Server 2003 > Setting permissions- program access

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Setting permissions- program access

Reply to Message Icon

Name: WkEndHacker
Date: October 13, 2008 at 09:17:40 Pacific
OS: Win server 2003
CPU/Ram: 3GB RAM
Product: Dell Precision 360
Comment:

I just bought a new Win 2003 server, and have it set up in the workgroup. (No Domain) In order for our design program to have acess to it's database, I have mapped drives from the XP Pro workstations to a shared folder on the server.

The problem is that even though I've set the sharing and security to allow users and authenticated users to be able to fully control the files, I still must log in to the server from the workstation.

I don't think that allows automatic file sharing. Is there a way to allow the program full access to the mapped drive without the log in screen?

And how should the sharing and security really be set up on this shared folder?



Sponsored Link
Ads by Google

Response Number 1
Name: Jestible
Date: October 13, 2008 at 10:52:31 Pacific
Reply:

Why not create a domain and use active directory? I highly recommend NOT doing what you currently have setup. Creating a domain and adding the machines is an extremely easy process.

What permissions are you setting? There are 2, file and share. I suppose you could just add the EVERYONE group to have full control on both shares, and it shouldn't ask for any credentials.

Holy Wow.


0

Response Number 2
Name: WkEndHacker
Date: October 13, 2008 at 11:51:08 Pacific
Reply:

I'm not setting up a domain and active directory as it would add a level of complexity that I don't need on a small network- on the advice of several system admins I know.


0

Response Number 3
Name: WkEndHacker
Date: October 13, 2008 at 11:54:43 Pacific
Reply:

Why would you not recommend doing what I am doing, and why would you set up active directory instead?


0

Response Number 4
Name: josh (by jpag3074)
Date: October 13, 2008 at 19:28:12 Pacific
Reply:

Because any IT guy would suggest a Domain if you have the capabilities. What does your database run over? SQL? Access? Most databases wont care whether its a workgroup or domain, unless they are custom and specific to something.
Your problem lies in authentication. When you type in
Start>run>\\servername to show shares, it automatically tries to log in with the user that you are logged in with locally. You will have to mach usernames / passwords.
Active Directly would allow you to add these users in, and for them to get onto the domain, they would log in with that user. That would give them rights to the server, ect.
Yes it will be more WORK promoting your Server to a DC but, more worth it in the long run.
Unless of course you are running like 2 PC's with this server, which at that point I would not even see why you would need a server.

Thanks for any input.


0

Response Number 5
Name: WkEndHacker
Date: October 14, 2008 at 05:52:19 Pacific
Reply:

I AM the IT guy (of sorts). It's ok if you don't consider me to be much of one. It's only one of the hats I wear here. :-)

And we have less than 15 PCs on the network. Which is why it's not really worth it to set up active directory.

Our design program uses an Access database. It installs itself and it's database on the "server" and the keyserver process also runs on that machine. Then the other workstations have the program installed locally via a netsetup program run across a mapped drive to the server. Once it's installed on the local machine it gets permission from the keyserver, and accesses the database on the server, but runs locally.

So, since it's the read write speed of the server that counts here, and XP flakes out after 10 users - that's why I have a real server. At least that's the theory. We'll see if it actually speeds up the process once I get this problem solved.

And like I said, several of my sys admin friends say I don't really need a domain/active directory for this small network. I believe 'em since one of them runs all the systems for a large government organization in whole southeastern US. He should know what he's talking about.

I really don't have that much of a security problem since I have a really limited group of users, so I'm not really worried about that. If anyone causes problems I just walk around the corner and slap 'em up side the head. :-)

I know I'm not using the server as it was really designed, but all I really need to know is how to set up the server permissions so that each user doesn't have to provide a username and password every time they try to use the design program. The program itself already has that built in. I don't need them to have to do it twice...


0

Related Posts

See More



Response Number 6
Name: josh (by jpag3074)
Date: October 14, 2008 at 21:47:26 Pacific
Reply:

In no way, shape, or form, was I intentionally suggestiong that you were not much of a IT guy. I was only expressing my opinion on the matter, and still provided you with a solution.

The Username and Passwordsr between local PC and the Server must match.
If you log into (example) local PC account:
u=account1
p=password

Then the account must be added the the server, with the same creds.

Then if everyone is utilizing your share, share it to everyone. That should enable the share to everyone and you wont have to worry about login to that share. If you have specific users for the share, then you will have to specify permissions.
The authentication will come from the server since its sharing the files and folders, if it cant recognize the account you log in with, then to grant access to the share it will prompt you for a logon.

If this works for you, which it should, I feel pretty bad for the Southeastern US, and am glad I work in the Midwest :)

Thanks for any input.


0

Response Number 7
Name: WkEndHacker
Date: October 15, 2008 at 05:35:51 Pacific
Reply:

Heh. Well that worked. I set up matching user accounts and passwords for each of the workstations on the server, and it automatically shares the folders for each workstation there's an account for.

Hey, no offense taken - I'll be the first to admit that I have a lot to learn, and I forget easy... But I'm what passes for the IT guy around this little shop. I know more than everyone else. You know what they say, in the land of blind people, the one eyed guy is king?

But I sure didn't say that my sys admin friend recommended this for _his_ network. He was right up front about the fact that in his systems he had a LOT of security in place, so this in no way reflects the way he has his HUGE network set up. In fact he had to do a little research in order to suggest ways for me to do this without having each user submit a name and password every time the program came up. It's not something he does.

Hey! Thanks for the help. I'm glad for this kind of forum where you can get all kinds of answers for problems. Have a great day!


0

Response Number 8
Name: josh (by jpag3074)
Date: October 15, 2008 at 17:33:09 Pacific
Reply:

I understand where you are coming from. I still stand by my original statement of promoting your server to a Domain :). But I also understand that uptime is more important that downtime / scrambling to get things working.
I am glad you were able to get your problem resolved though! Good luck to you and the SMB you work for!

Thanks for any input.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: Setting permissions- program access

Set Permissions by Computer Objects www.computing.net/answers/windows-2003/set-permissions-by-computer-objects/7267.html

Setting permissions www.computing.net/answers/windows-2003/setting-permissions/5624.html

User sets permissions? www.computing.net/answers/windows-2003/user-sets-permissions/4379.html