It takes a little planning up front to determine how you will use BO Enterprise in your business. In our case, I created a folder for each business unit (Inspection, Parks, Finance, Court, Fire, Police, etc) within the City Government.
In our particular case, we have both internal (city) and external (county) users.
External users log directly into BO Enterprise using the Enterprise authentication. These users do not have a Windows AD account so I create their own usernames and passwords.
Internal users use Windows AD authentication when they log in using their Windows XP username and password. To accomplish this, I had several Crystal Group names created in Windows AD and assigned each user to a group(s). Since I have several hundred users, this allows me to restrict user access to certain BO Enterprise folders based on the groups that the individual was been assigned.
I then linked the the Windows AD to BO Enterprise using the CMC Authentication -> Windows AD screen and specified each Windows AD Crystal group I want and clicked update.
-lw