IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
To be added to the illustration: Menu SYS:PUBLIC\SYSCON.EXE
"Supervisor Options - File Server Error Log"
Workgroup Managers
A workgroup manager is a restricted supervisor account. Like an
administrator, it has the right to create or delete bindery objects (users, user
groups, printer queues). The rights used by a workgroup manager, which can
be passed on to users or user groups must comply with the rights granted by a
supervisor.
Workgroup managers may not set up new workgroup managers or users with a
supervisor-equivalent security level, unless the workgroup manager already
possesses rights equivalent to a supervisor.
Station Restrictions
With the help of the menu point Station Restrictions, the network addresses
from which a user can log on to the Novell Netware server can be determined.
Information regarding the respective address of a workstation in the network
can be found out, for example, by use of SYS:PUBLIC\USERLIST.EXE /A.
Determining permitted network addresses is particularly recommended for
supervisor or supervisor-equivalent accounts. These should be decided on the
spot and as conditions require.
Standardised Set-up of Users and User Groups
Besides using menu utilities SYS:PUBLIC\SYSCON.EXE, it is also possible to
set up users with the help of SYS:\PUBLIC\MAKEUSER.EXE and
SYS:\PUBLIC\USERDEF.EXE .
These programs are particularly suited to the simultaneous set-up of large
numbers of users.
With the help of SYS:\PUBLIC\MAKEUSER.EXE a type of Batch-file is
created, with can be used t set up many users with various privileges.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000