Setting up small business network - should I set up a domain or not?

[harmonyjones]

I'm setting up a network for a small business.
The server is running WINDOWS 2000 Server, I have 5 clients running Windows 2000 professional and 2 clients running Windows XP professional.
We have a broadband Internet ADSL line into the office with one fixed IP address and we share the net connection via a router and hub.

I do not plan to put the server on the interet, it does not need to be used as a mail server or web server. It's main purpose is for internal file and print sharing.

I'm not sure if I should set up a domain for the office and use Active directory or just use file and print sharing on the server without setting up an actual domain.

Can anyone offer me some suggestions and perhaps briefly outline the benefits or setting up a domain versus not?

Thanks.

 

[watts3000]

Yes for evan 7 clients I would set up a active directory domain. With domains you have a central area for control for example you create one user account for a user to log into any machine on the domain. If you did a work group that user would have to have a local account on each box. Also it will give you the ability to deploy software update services this will automatically keep your workstations up to date. Also I know its only 7 users but replace the hub with a switch switches are just 2 cheap now to be using hubs for anything. Have you ever set up a 2000 network before?

 

[mcveigh]

is win2003 an option...it's easier to setup and manage I find

 

[BoKingWen]

I had 5 computers at home and I should try the active directory thingy.

 

[watts3000]

Windows 2000 server will be fine. Thats the platform that 90 percent of enterprise is still on. Theres really know different in win2k than 2003. The main differences are iis 6.0 volomue shadow copy and some changes in the active directory scheme. Also the everyone group is removed when you go to the security tab of a share. Window 2000 and 2003 are the same if you know one you know both.

 

[howdyduty]

If you never set up a Domain/AD, go with sharing only. Also, if you only have very basic sharing needs, I would do sharing only. If your comfy with a Domain or AD, that would be fine. The advantages of the Domain/AD is the more granular control you can have with the clients use of the server resources. You can also do other things like set security templates as they log on the Domain. The disadvantages are that you have to actively set the control and manage the control to gain the advantages. You could do sharing first then if you wish later go with Domain/AD. If your biz plans on growth in the near future, Domain/AD might be needed. Be sure to limit access to that server to local lan only...no internet.

 

[harmonyjones]

Can anyone recommend a good switch (brand /model number) I can up upgrade to.

One of the most important things I need to do with the network is set up security for a folder on the server. The folder contains around 5000 MS word documents. I want my users to be able to read those documents but not edit the original versiosn. I also need to prevent any user for copying all the documents onto their local machine or worse onto a portable drive.

Is there a way I can allow them read access, save as access but prevent any mass copying?

Thanks,

 

[Thoreau]

for a switch, just about any will do. Im partial to Netgear hardware, but I also just picked up some Dell switches (*CHEAP!!!*) and love them to death. For a network of your size, you definitely don't need managed switches, so the cheaper unmanaged versions would work just fine.

As far as the files go, it sounds like a domain would do you some good. With a domain setup you can easily setup permissions so that end users (or the group they are assigned to) cannot write to those files or delete them, but can still read them.

To keep people from mass-downloading the files, about the only thing i can think to do is remove their access to the local harddrive and force them to use a network drive with strict quota limits. At the same time, using some nifty policies to remove their access to removable media devices/drives, disable USB maybe, etc.

 

[watts3000]

I agree with Thoreau dell and netgear switches are good. I set up a 25 user small business last year where I used both netgear and dell. They are both good switches for the price. By the way why don't you guys just establish a relationship with a network consultant right now. Let him build the network for you and also he'll be there for future needs . This is the problem with windows networks just because theres a point and click gui veryone thinks they set one up. If this was all linux or bsd I'm sure you would get a consultant. I'm not trying to be rude. I'm just speaking from experience theres a small company in my area who had a guy that said he could install exchange. Well he screwed the entire installation. They were out double money when it was said in done. They paid him $500 and we got paid another 1000.00 to go in and set it up right.

 

[SaigonK]

I would say no...why do you need it? Why would you want the hassle? If they dont intend to grow bigger than they are or a few more people, why go through the hassle of AD for nothing?
Make local accounts on the server, or make single accounts for single folders....its a lot less hassle....