HP 345646-001 - StorageWorks NAS 2000s External Storage Server, Administration Manual

Page: 102 / 200

User and Group Management
102 NAS 2000s Administration Guide
The configuration of the domain controller is reflected on the NAS 2000s because it obtains
user account information from the domain controller when deployed in a domain environment.
As mentioned previously, the server cannot act as a domain controller itself.
User and Group Name Planning
Effective user and group management is dependent upon how well the user and group names
are organized. Administrators typically create a small number of groups on the network and
then assign users to the appropriate group or groups. File system and share permissions can
then be applied at the group level, rather than at the user level. If the number of groups is
small, assigning the appropriate permissions to selected group, or groups, is more efficient
than assigning permissions to each user.
Although each organization has specific conventions, following general guidelines makes
administration simpler and more efficient. Because CIFS/SMB is dependent on users and
groups to grant appropriate access levels to file shares, CIFS/SMB administration benefits
from a consistent user and group administration strategy.
Managing User Names
Usernames should reflect a logical relationship between the username and the person who uses
the account. It is important that rules are established to ensure that usernames are:
■
Systematic
■
Easy to follow and implement
■
Easy to remember
Using a combination of the user's first name, middle initial, and last name results in systematic
usernames for every member of a particular organization. Common examples include:
■
First initial followed by last name (jdoe for John Doe)
■
First initial followed by middle initial and last name (jqpublic for John Q. Public)
■
First name followed by last name, separated by a period (john.smith for John Smith)
■
Last name followed by first initial (doej for Jane Doe)
Guidelines must be in place for instances when two users have the same initials or name. For
example, a number can be added to the end of the username (jdoe1 and jdoe2).
Other conventions can be applied. Just ensure that conventions are both systematic and
consistent.
Managing Group Names
Group management follows many of the same principles as user management.
It is recommended that group naming conventions be systematic and easy to understand. Make
the group name convey some logical information about the function or purpose of the group.
Table 11 provides examples of group names.
Table 11: Group Name Examples
Group Name Description
Administrators All designated administrators on the server
Users All standard server users
Power users All standard server users requiring advanced access levels