Manage peer shares in a domain

Having only the local SAM available for adding
into permissions lists is often a symptom that DNS
is either incorrectly configured on the client or that
the zone(s) supporting Active Directory are unhealthy.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"KentMitchell" <anonymous@discussions.microsoft.com> wrote in message
news:5f4d01c3adda$c3b2da20$7d02280a@phx.gbl...

> Several of my users use peer-to-peer shares on their PCs.
> Is there a way to centrally manage these shares from a
> domain controller? When I try to setup security on the
> local shares I can only select account & groups on the
> local machine. All computers and users are in the same
> domain and have accounts in Active Directory. However,
> none show up in the directory list at the client machine.
> The server is Windows 2000; clients are XP and 2000.
>
> Please educate me!
> Thanks,
>

In most cases I would agree. However, we don't have that
many workstations and most have big hard drives that go
largely used (i.e., cheap and paid for versus server
space). The bottom line is the guys who write the checks
want to do it this way. So for now, I just need to find
the best way to live with it.

>-----Original Message-----
>Personally, I think that if you have a domain, no data

should be stored

>locally at all, and I wouldn't let users set up shares.

All data should be

>stored on the server, and workstations should be viewed

as glorified dumb

>terminals. Too much headache to administer and support.
>
>KentMitchell wrote:

>> Several of my users use peer-to-peer shares on their

PCs.

>> Is there a way to centrally manage these shares from a
>> domain controller? When I try to setup security on the
>> local shares I can only select account & groups on the
>> local machine. All computers and users are in the same
>> domain and have accounts in Active Directory. However,
>> none show up in the directory list at the client

machine.

>> The server is Windows 2000; clients are XP and 2000.
>>
>> Please educate me!
>> Thanks,

>
>
>.
>

You must sneak into their offices when they are not there and hijack
their workgroup setups into domain setups. Then implement group policy
and the machine is yours!!! Bwaaa ha ha ha. Isn't IT fun? So many ways
to frustrate users.

Or you could simply tell them that if they use shares on your servers
instead of setting up their own, that you will backup and protect their
data for them. Of course, you should take steps to backup your server if
you tell them you will. And tell them that if they use domain logons
they can access their data from any machine and they will only have to
logon to resources once instead of on each access.

--
Kent W. England, Microsoft MVP for Windows Security



"KentMitchell" <anonymous@discussions.microsoft.com> wrote in
message news:5f4d01c3adda$c3b2da20$7d02280a@phx.gbl...

> Several of my users use peer-to-peer shares on their PCs.
> Is there a way to centrally manage these shares from a
> domain controller? When I try to setup security on the
> local shares I can only select account & groups on the
> local machine. All computers and users are in the same
> domain and have accounts in Active Directory. However,
> none show up in the directory list at the client machine.
> The server is Windows 2000; clients are XP and 2000.
>
> Please educate me!
> Thanks,
>