[SOLVED] Dilemma reguarding admin & file sharing.

[parttimetechguy]

Hi everyone,

I've recently taken up the role of a part time tech guy at a small business office(family's), and I'm not exactly computer network savvy so to say. I've been able to set up a basic network with a server and different security level user accounts.

The perdicament I'm running into is as follows:

-The boss wants to be able to see all the staff's documents and be able to access them with full control(read, write, execute etc...)

BUT

-The boss also doesn't want the staff's accounts to be able to install programs, change configurations in control panel, view unessecary websites and so on.


Now I've read up on this forum, and it's been VERY VERY helpful and I want to thank EVERYONE that posts up answers here, because I wouldn't know what to do w/o you, hahaha


****

I've been able to solve the internet browsing issue from another thread--I was able to disable all sites except for the ones business related and disable downloads and installations on their paticular account.




My issue is, how do I make it possible for the boss's computer to view the STAFF's documents without changing their accounts status to ADMINISTRATOR to prevent them from fiddling with the control panel / admin settings. (ie, printer driver, add/remove program, and basically anything in the control panel window)




Much thanks and appreciation ~
Part-time-tech-guy
Cheers,

[parttimetechguy]

Oh, and I forgot to add,

I'm leaning towards, making them all admin status, but manually disabling the certain features i've listed that the boss doesn't want them to have......

any ideas? ^^

[parttimetechguy]

Nevremind, problem solved....thanks anyways.

[Done_Fishin]

I'm glad that you have solved that problem on your own .. it's understandable that you may want to do such things but I am not sure that we want to teach the world how to hack into a network to limit or remove limits & permissions ..

Please visit us frequently, glad you like the forum.. we aim to help where we can

[parttimetechguy]

Originally Posted by Done_Fishin

I'm glad that you have solved that problem on your own .. it's understandable that you may want to do such things but I am not sure that we want to teach the world how to hack into a network to limit or remove limits & permissions ..

Please visit us frequently, glad you like the forum.. we aim to help where we can

Hi!

I was unaware that this would be considered hacking. As I thought, permissions were usually moderated by the computer department in most companies. It was mostly a preventative measure because the employees aren't all computer savvy(for some opening an email is a lost cause).

Is removing certain permissions, ie granting access to certain server files, and removing access, OR making it so that they can't go into Control panel to fiddle with settings, considered....hacking?

I do have full administrative rights on this network as well....

Hahahah this isn't a justification, as nobody knows me anyways, I jsut want to inquire as to which part was considered hacking or maybe if I worded things wrong that made it seem so, inorder for me to ask for help correctly next time! =D

[johnwill]

Since we obviously can't determine intent here, it's our policy to abstain from assisting in requests of this type.

[Done_Fishin]

Originally Posted by parttimetechguy

I was unaware that this would be considered hacking. As I thought, permissions were usually moderated by the computer department in most companies. It was mostly a preventative measure because the employees aren't all computer savvy(for some opening an email is a lost cause).

Is removing certain permissions, ie granting access to certain server files, and removing access, OR making it so that they can't go into Control panel to fiddle with settings, considered....hacking?

I do have full administrative rights on this network as well....

Hahahah this isn't a justification, as nobody knows me anyways, I jsut want to inquire as to which part was considered hacking or maybe if I worded things wrong that made it seem so, inorder for me to ask for help correctly next time! =D

Any twiddling with the way windows or any operating system for that matter is hacking .. in this particular instance you are in a position of asking information that would be considered to be a can of worms .. Whilst I and a lot of the "staff" on TSF would be willing to give you the benefit of the doubt in as far as your intentions are honourable, unfortunately that same information could be read by equally dishonourable people who could then use it to gain access where they are not welcome or wanted.

My mind goes to several scenarios like wife , husband , father who have a SOHO setup in their house to allow Mother, Father & children interact with file sharing e-mails etc.
The Network Administrator wants to know what spouse & kids are up to during the day on their computers. He/She reads on this forum how to set up the network so that He/she can "eavesdrop" on all that is going on .. perhaps one of the kids realises this and decides to get revenge by creating a scenario .. perhaps the spouse is having an affair .. who knows .. but we don't want that type of thing happening .. and we don't want to be responsible for making it easy to do ..

I didn't particularly like the idea that the boss guy was going to be snooping on the employees to see what they are (have been) doing , what not .. that's invasion of privacy .. I think that ALL he needs to know about whether they are working or playing can be seen from the network logs .. maybe just something that would allow him to see snippets of what programs have been used and for how long .. but statistics are funny things and can be manipulated for whatever purpose. Just because a program is running in the background doesn't mean that an employee is actually using it ..

anyway .. putting information out on open forum in that manner is I think dangerous. Leave it up to the professionals (like yourself) to instigate. what you and I consider to be approaching a problem with a professional attitude is also possible to misconstrue as hacking .. since it involves manipulating (whether legally or not), the Operating system or files that have been installed.

and to quote the Networking Manager

Originally Posted by johnwill

Since we obviously can't determine intent here, it's our policy to abstain from assisting in requests of this type.

and to quote the rules

ASSISTANCE WITH ILLEGAL ACTIVITIES

We will not provide any user with information about the location of websites that assist with software pirating, hacking, password cracking and keystroke recording software. Furthermore we will not offer advice, assistance or instruction with regard to any of the above activities, illegal or otherwise.

ILLEGAL ACTIVITIES

Users may not post hacks, cracks, or give instruction how to pirate any type of software, or anything similar, in any forum of TSF. We do not condone, support or give instruction on any illegal activity pertaining to computer systems, computer hardware, computer software programs or computer related activities. Included in this group of activities are requests for help to circumvent system admin passwords or Administrator settings on networks. We do understand that the majority of requests may be legitimate, but we do not have the means to discern these from non-legitimate requests.