Securing Windows 2000 using groups

[imported_ChaoticGeek]

Hey everybody, just have a quick question for you folks. I have to write a paper on securing Windows 2000 for a small business environment through the use of groups, and I'm running into a wall. The basic scenario is that it's a small environment (approx. 100 computers) that often uses temporary employees. After looking into the way that Win2K uses groups, my basic strategy is to create a group for each individual department, assign permissions to the groups, and then add/remove users as they come and go. The problem is that there's only so much you can say about that, hardly enough for a full paper. Is there something that I'm missing? Could somebody maybe point me to a site that has recommendations for such a scenario, or just something that could give me other ways to approach this? Thanks in advance for any help.