Accessing member server

[rianeiromiron]

Hi all:

I have a server, say, S01, (running 2000 Server) which is the Primary Domain controller. User1 and user2 and user...n are defined in this server. In the same local (office) network there is another machine (say S02)running 2000 Server also. There are several folders in S02 which I need to be accesible for User1 and User2. Since these folders are enterprise-security-related I need only User1 and User2 to be able to access those folders.

I'm new to Server 2000, so for some this might be a trivial question.

Can anyone help?


Rianeiro

 

[Seaspray0]

Piece of cake. The domain controller does an excellent job of validation of users for all the resources in your domain. Make sure the member server is a part of it. That means... do the same thing to the server that you do for the workstations... join the domain (if you haven't already done so). The process is the same as the workstations. Right click my computer>properties>network identification tab. Join the domain with the member server (note: this doesn't make it a domain controller, just a member of the domain just like the workstations). Now you can log onto the member server with a domain account (one with local administrative priviledges) and create a share. Use the NTFS permissions on that share to restrict who you want to have access (now including local AND domain accounts). You will want to add the domain accounts and remove the everyone to prevent just anyone from getting it. Since the server is a member of the domain, it will accept the Domain Controllers validation of the domain users and grant the shares based on the NTFS and share permissions you define on the share itself. You don't even have to have anyone logged on to the member server, just turned on. Note: you can also share from workstations that are members of the domain too... to other domain users even though they don't have accounts on the local machine! Aren't domains cool?

 

[rianeiromiron]

Dear Seaspray0

In my desparation, I went to the member server and disabled member of Domain, enabled Workgroup, and I was able to see the local network. Now, I'm trying to joing the member server back to the domain, but I receive the message

"The specified domain either does not exist or could not be contacted"

I have already gone to Active Directory Users and Computers, in the domain name, computers, I already defined S02 in the domain controler computer S01.

Please help.

 

[GrnEyedLdy]

Rianeiro,

Are you on the same 'Network'as the Domain Controller? The member server that you are trying to re-join to the domain must be able to reach an A/D DNS server. Check the TCP/IP properties of the member server and make sure that it's DNS setting is pointed at the Domain Controller running the DNS service.

Not sure I understand what you mean here,

"I have already gone to Active Directory Users and Computers, in the domain name, computers, I already defined S02 in the domain controler computer S01."

Patty

 

[rianeiromiron]

Patty,

Prior to the changes I made, if I open Entire Network I was able to see

1. Microsoft Windows Network
2. Directory

After the changes made (changing to workgroup instead of domain) I'm onle able to see

1. Microsoft Windoww Network.

... The domain is gone.

In your question Rianeiro,

Are you on the same 'Network'as the Domain Controller? Are you taling about the physical connection? If this is the question, the answer is Yes, in fact, I'm able to see the server S01 through Microsoft Windows Network.

As for the TCP/IP question: I didn't change any of the IP addess, Subnet Mask or Default Gateway or preferred DNS server.

Here's another detail. S02 Has ISA Server installed, (sorry I didn't mentioned that (Seaspray0)), and this machine is the proxy for the Internet. It's connected to a router and cable modem. I, however wouldn't want to mess with that.

"I have already gone to Active Directory Users and Computers, in the domain name, computers, I already defined S02 in the domain controler computer S01."

What I mean is:

1. On the domain server (S01) I Opened Active Directory Users and Computers

2. Selected the Computers

3. Right Click

4. New

5. Computer

6. Enter name S02 and

7. I can see the computer as a part of the domain.

Thanks Patty

 

[GrnEyedLdy]

Can you post an IPCONFIG /ALL for S02 (the one that can't join the domain) and one for the Domain Controller running DNS...please

Thanks

Patty

 

[rianeiromiron]

Dear Patty:

Would you be so kind in receiving this information via e-mail. (Security reasons). Please, send address to

rianeiromiron@yahoo.com