WIN2K server - Users can map drive even if not logged in

[spock2054]

In the midst of PDC failures, in the form of a Compaq Proliant 1600 running Netware 5.0 I bought a Dell server and loaded WIN2K server on it and set up Active Directory. Now the PDC is dead. However users can now map the shared drive on the new server without logging into that server, ( which happens to be the WIN2K server running AD) Is there any way to force users to log in to the WIN2K box making that the only way they can view the shares? I am presuming that it might have something to do with my having installed AD and that I might have to use DCPROMO. If so do I have to enter all of the users all over again?

Thanks

 

[Seaspray0]

It has to do with permissions. On the share permissions, remove the everyone group and replace it with the domain users group. Microsoft suggests you give full access at the share level and use your NTFS permissions to clamp down on access at the folder/file level. On the folder you are sharing, remove permissions from everyone except those groups who need them (and what kind they need). The domain users group will give all domain users (those logged in to the domain) access to see the share, and the NTFS permissions should specify which groups are allowed to use that info.