1. NETWORK FILE ACCESS SECURITY Daniel Mattingly EKU, Dept. of Technology, CEN/CET

2. 2 OUTLINE Relate project to the real world Previous experience Virtual PC Roadblock(s)‏ Future applications

3. 3 MOTIVATION Central Baptist Hospital implemented this procedure to control access to certain network resources based an employee's position. I found this concept interesting and highly useful, so I wanted to duplicate it. Useful in many corporations and businesses

4. 4 INTRODUCTION A corporation or business can have multiple departments, with people who have differing levels of security. R&D, Accounting, Legal, Personnel, etc. CEO, Board member, senior supervisor, junior supervisor, employee, etc.

5. 5 INTRODUCTION Windows Server 2008 can be used to limit access to information on the User, Computer, and Departmental levels. R&D can only see R&D Jane Doe in Accounting can access Accounting information from any computer, and only Accounting information

6. 6 PROBLEM STATEMENT Corporations can sometimes find it hard to control the different resources available on the network, including file shares, Internet access, and printers. As such, they must find a way to limit these resources only to those that require it for their job.

7. 7 PROPOSED SOLUTION Virtual PC Ability to run multiple virtual computers on a single host computer Very RAM/CPU intensive Simulates PC hardware Requires an OS image to add a computer

8. 8 PROPOSED SOLUTION Windows Server 2008 Active Directory Group Policies based on Active Directory users and groups Roles Used File Services DNS DHCP Active Directory Domain Services

9. 9 PROPOSED SOLUTION Services Used Group Policy Manager File Redirection Active Directory Users and Groups Control which users belong to which groups Could be used on the PC level, too

10. 10 PROPOSED SOLUTION Roadblocks Drive mapping Login name clearing

11. 11 RESULTS Each user is able to access and modify the folder associated with their department, even if they try to log in from a different department. Server controls Desktop files, keeping the Documents folder easily accessed at all times, and minimizing desktop clutter. Very tyrannical approach

12. 12 CONCLUSIONS This system can be easily setup in any company or business, small or large Financial side would limit usage Extremely useful in controlling and monitoring resources

13. 13 FUTURE WORK Extend the policies to more users, departments, and computers Deploy specific software packages for different departments based on Group members Group Policy E-mail: dan_mattingly@yahoo.com