Every business with branches needs to have a properly structured network with access permissions to govern and regulate access to the company’s resources. In this case, the company has branches that span different time zones and therefore operations do not overlap with each other at any one time. Active directory systems and NTFS systems help with access rights in different ways. Apart from that, the company’s servers need to be properly secured at all times given that it has an international market for its products. With 4 satellite offices, each with about 20 staff members, this is a large company by every standard. Add to its worldwide market, the challenges in keeping the business running involves keeping an e-commerce running at all times, ensuring transactions and transaction data are secured, ensuring each employee has a user profile which is unique and cannot be overridden by any other workmate. In order to deal with these challenges and maintain a smooth operating organization in terms of online resources, information management systems, and servers; the company must have well organized security systems, active directories, server and file systems.
Active Directories are found on Microsoft domain networks. Given the size of the company and the number of staff on its satellite offices, it is prudent to have an Active Directory to manage server access across all the branches. Its function will be to create and store directory data, managing communication between all users within the domain. It controls all logon processes, looks into authentication processes, as well as directory services. Microsoft Servers always have Active Directories. In order to ensure organization and security across all branches or satellite offices, the Active Directory should define users and also define the user access time. This will be useful in monitoring domain access across all offices. It also makes it easy to identify suspicious activity in the domain in case of unauthorized access anywhere within the domain. While Active Directory manages access and access rights, NTFS is a file system mostly used on Windows platform personal computers. The hard disk drives are formatted on NTFS systems. It is the default file system on Windows operating systems.
NTFS features Access Control Lists and file encryption. NTFS file system is necessary to manage share options, file system permissions, direct permissions as well as shared permissions, access tokens, Kerberos, and so forth. Using NTFS Permissions, there are Modify, Full Control, Read & Execute, Read, List Folder Contents, and Write permissions on folders. In case staff members in an office will be using shared computers, each one of them is assigned access credentials using an Active Directory, and then can then go on to manage their files and directories in the computers using NTFS permissions. Security can be compromised internally and not just across networks through breach of firewalls and access credentials. If an employee has NTFS permissions in place, they can help prevent security breaches.
Application Servers are implemented in Windows environments. They are used to host server based business applications. An Application Server also provides the Windows Server 208 installation to a domain. It provides for the .NET Framework too. The options available are Enable ASP.NET, and FrontPage Server Extensions. The FrontPage option enables multiple users in the administration and publishing of web sites. This can only be done from a client computer and happens remotely. The ASP.NET option features a unified web app platform which provides its services that are necessary in the building and deployment of enterprise class web apps. The advantage of ASP.NET is that the apps created on the platform run alongside ASP code on IIS. This eliminates the need to upgrade ASP pages. It also features enhanced performance, besides supporting several languages such as .NET, Visual Basic, JSCRIPT NET, and C#.
Within each office there should be a network printer. There are different printers available in the market today. Some have Bluetooth and wireless connectivity in-built. This means that once the printer is added to a domain through the Active Directory, other client devices on the network or domain will then add it to their list of available printers through a wizard available on windows platform machines. There is also the option of USB printers that are plug-and-play. They are the easiest to work with especially in individual offices across the network. That means each of the 5 offices – 1 headquarters office, and the 4 satellite offices will have a printer each.
Active Directory Diagram
References
Civil, R. (2008). How IT Works NTFS Permissions, Part 2. Retrieved October 26, 2013, from TechNet: http://technet.microsoft.com/en-us/magazine/2006.01.howitworksntfs.aspx
Microsoft. (2005, January 21). Application server role: Configuring an application server. Retrieved October 26, 2013, from Microsoft TechNet: http://technet.microsoft.com/en-us/library/cc728199(v=ws.10).aspx
Technet. (2013). Active Directory Domain Services. Retrieved October 26, 2013, from Technet: http://technet.microsoft.com/en-us/windowsserver/dd448614.aspx
