Configuring the Server for a Workgroup

Preparation is important, but eventually you consider all elements of your workgroup and create a plan for the network it requires. At this point, you want to configure the server, which means to set up users, groups, and resources for use. The server can be standalone or used as a workstation. How you set up the server depends on the plan you created for your workgroup. After you create this plan, be sure to stick with it as much as possible. Of course, you may have to make the occasional change when you encounter an issue you didn't consider.

You perform most of the configuration tasks in this tutorial by using the Computer Management console, found in the Administrative Tools folder of the Control Panel. Open this console and you see folders for scheduling tasks, viewing entries in the event logs, creating new shares, managing users, monitoring the system, working with system storage, and managing services. The folders in the left pane show a hierarchy of tasks you perform. The right pane shows the task you selected.

Warning: This section discusses only the server configuration for workgroup use; it doesn't tell you about security requirements. Obviously, a workgroup requires security to ensure that the workgroup shares resources in the way you intended. In addition, improper security settings can aid in the distribution of adware and viruses. Security serves many purposes - even though many users view it as a means to keep them from using resources they want. Make sure to set both workgroup security and local security policies to maximize the effectiveness of the security settings. The following sections describe the configuration process.

Adding groups to the workgroup

One remaining organization task is to create groups for your workgroup. For example, you might create a group of writers who work on developing new promotional documents. You could give such a group the simple name Writers. Another group you probably need is managers, the people who manage projects on the network. The reason these groups are so important is that they help you think about the various roles that each member of the group fulfills. In addition to organizing the people on your network, the use of groups makes it easier to secure your workgroup.

Remember: To provide maximum functionality for your workgroup, always create the groups before you create the users. You assign users to groups, not groups to users. Sometimes you need to create a group or two after you set everything up - it's certainly possible to forget a potential requirement, but you should create as many of the groups as possible before you begin to create users.

You don't start with a blank slate when it comes to groups. Windows Server 2008 comes with a number of predefined groups. To see the default groups, open the Computer Management console, found in the Administrative Tools folder of the Control Panel. Select the Computer Management\System Tools\Local Users and Groups\Groups folder. You see the listing of groups as a minimum. These are the default groups.

Windows Server 2008 provides a number of default groups that address many operating system needs. Of course, the group with the most power is the Administrators group. Notice that these defaults include a special group for reading the event logs and the Users group that has everyone as a member. You can also use the various operators groups (such as Print Operators) to provide access to special features of the server for those who need it.

These default groups all address the operating system requirements, not your special company requirements. For example, notice that the default groups don't include managers or writers. You won't find a group for advertisers or any other special group in your organization either. To address these custom needs, you must create new groups. As previously mentioned, it's always a good idea to create the groups you need before you create any users so that you can assign the users to the groups as you create the user entries. The following steps tell how to create a new group:

1. Right-click the Groups folder and choose New Group from the context menu.
   You see the New Group dialog box.
2. Type a name for the group in the Group Name field.
   Use a descriptive name for the group. For example, when you want to create a group for managers, use the name Managers. One- or two-word group names are best because they're easiest to remember. Don't try to describe the group using the name. Although you should use a descriptive name, you don't need to provide a lengthy name that will prove difficult to remember later.
3. Type a description for the group in the Description field.
   Use as many words as necessary to describe the group completely. You should include what the group is for, who is typically in it, why you created it, how to use the group, and when the group should dissolve if you created it for a particular project only. Describing the group completely helps prevent misuse and makes it easier for other administrators to use the group correctly. If all you want to do is create a new group, proceed to Step 8.
4. Optionally, click Add to add users to the group.
   You need to perform this step only when you create the group after you create the users. Windows displays the Select Users dialog box, where you can choose users as members of this group.
5. Type the names of the users or groups that belong to this group.
   That's right - groups can contain other groups. For example, if all users from a particular project are also managers, you can place the project group within the Managers group. The only group you can't add to another group is Administrators, and that's because administrators already have full access to everything on the machine. You normally add only usernames to the group. Separate each name in the list with a semicolon. For example, typing George; Amy adds users George and Amy to the group. Follow these steps if you don't remember the name of a user or group:
   • a. Click Advanced to display a larger version of the Select Users dialog box, where you can find names based on specific criteria.
   • b. Click Find Now to display a list of names and groups.
   • c. Highlight the names you want and then click OK.
     The names you want to use appear in the list in the smaller Select Users dialog box.
6. Click Check Names.
   Windows checks all the names, to ensure that they're correct. If Windows finds an incorrect name, you see a Name Not Found dialog box, where you can choose to correct the name or remove it from the list.
7. Click OK.
   You see all user and group names you provided added to the Members list of the New Group dialog box.
8. Click Create.
   Windows creates the new group and displays a blank group for you. Follow Steps 2 through 8 to create another group if you want.
9. Click Close.
   Windows closes the New Group dialog box and you see all the new groups you added in the Computer Management console.