Sharing with new server

[Theslowone]

I just got a nice little workstation(windows xp pro sp2) that we are using for a backup server for about 7 computers. The problem is that we have about 200 computers on the network and all the machines see each other. How do we set up the servers share settings so each of the 7 have a folder and no one else can access it. I have tried all the easy methods and can't seem to get it right.

I know the easiest way is hide the name using the dollar sign and then map it, but is there a better more secure way of doing this? I have never set up a domain, and i prefer not to buy anymore software. I would of went with small server editoin but i think the cals aren't worth it right now.

any good input would be appreciate it. And sorry in advance on my ignorance about networking.

 

[Kelemvor]

If the server is going to run backup software, the software can usually be set to go to to specific computers when it's doing it's backup. If you're doing it more like a file share that any computer can just manually save files to, you could try setting permissions on folders that only certain users can see certain folders and things like that. Not sure of the best solution.

 

[Theslowone]

I am not running any special software at current, and this is just to send files to. I have messed with the permission but without much success.

 

[Lordicus]

For a 200 node network I would strongly suggest some server software.
You want to do what the server can do. User accounts/customized security...

I mean we can cut corners but you shouldn't cut this one. A 200 node network without a server; I can say I have never heard of that in my x years in IT (there hasn't been many evidently lol).

All I can come to think of for this is:

1. Put 2 NIC's in each of the 7 PC's as well as an extra 1 in the "wannabeserver" XP Pro. Connect all these new NIC's to another switch and put them on a seperate subnet.

2. Another option would be to locate some free ftp server/client software.

3. Another option would be linux - samba.

Doing so(#1) eliminates all other hosts from accessing the other subnet. Make sure that all other hosts stay on their subnet as well.

Security is far from standard but its what you are aiming for by having little budget. I have ordered the choices in terms of difficulty/knowledge required.


I hope this helps, Id love to see some other ideas too

 

[Theslowone]

I must of not made my point clear. We have servers thoughout the building, but the building is a group of different contractors working on the same type of task and all use the same intranet. The network is shared, but our little group wants a better way of backing up then over dvds or tape drives. This server is for our group only and only for backing up. option 1 is out cause there is to far inbetween for that much network cable, we are in a secure area so no wireless.

I have thought about linux but then i would have to set up the raid again, the ftp might be an answer that would work.

Thanks for your input

 

[Fardringle]

If you want a relatively simple solution not requiring any new software or hardware, you could just share a folder for each of the 7 users on the 'server' computer and assign NTFS permissions to the folders for the specific users' domain accounts (assuming they log in to a domain) and deny access to everyone else. Other users on the network would be able to see that the shares exist if they browse the network unless you hide them using the $ symbol at the end of the share name, but they wouldn't be able to access the contents of the shared folders. For extra security, you can also encrypt those folders. Just make sure you assign at least two trusted people (preferably also using their domain accounts) as Designated Recovery Agents on the PC so that they can unencrypt the folders if the users' EFS keys ever get lost. It would also be a good idea to back up the EFS keys to floppy or CD and store them in a safe place

If these users don't log in to a domain, you'll need to create individual accounts for them on the backup server and then assign permission for those accounts to access the shared folders, denying access to everyone else. The 7 users will have to 'log in' to the computer when they try to access their shared backup folders using the local accounts you create for them on the PC. If you go with this method and decide to encrypt the folders, make sure that you create at least one extra account on the computer to be a Designated Recovery Agent, and back up the users' EFS keys to floppy or CD and store them in a safe place.

 

[Theslowone]

Thanks Fardringle, i will try and see if the second part works. Another question for you is there a way to create a domain on xp without going to 2003 server edition?

A domain under a workgroup?

 

[Kelemvor]

I would think the easiest thing to do would just be to set permissions on that server's share so that only the people in that group can access it (assuming ou have a login system and such).

Should be able to just right click the share, go to permission, and add the people by ID. At least that's how we do it.

 

[Theslowone]

that is the problem, we don't have a login system as of right now. But that would be the easiest way thanks for the input.

 

[Goosemaster]

What operating ystems are you using?

Assuming htat you have only windows 200 and XP PRO machines, use NTFS file ermissions like everyone else said.