Description Of A Network Administrator

Formal user access control procedures must be documented, implemented and kept up to date for each application and information system to ensure authorised user access and to prevent unauthorised access. They must cover all stages of the lifecycle of user access, from the initial registration of new users to the final de-registration of users who no longer require access. These must be agreed by IDI. User access rights must be reviewed at regular intervals to ensure that the appropriate rights are still allocated. System administration accounts must only be provided to users that are required to perform system administration tasks.

Users can be the main risk to an organization. A disgruntled employee can access the server and open it up to all types of security issues or install malware or virus’. User access to the server should be limited to users that need admin level and closely monitored. Admin accounts should never be used for day-to-day activities as this could lead to username/passwords being stolen more easily providing access to others from the outside. When an employee leaves their admin and general use accounts should be turned off immediately. If an employee is to be terminated with cause, theses accounts should be disabled prior to the termination discussion. Users risk are medium impact and highly controllable with policy and procedures.

I setup windows 2008 server create Microsoft Active Directory(AD), AD can centralize all user accounts for management and setup use right to access File Server permissions can enhance the level of flexibility in management.

What role enables users working at another computer on the company network, or on the internet, to establish a connection to a server and open an application or desktop session there?

Is used a lot in colleges and schools it provides access to the right user it also manages and develops user’s access to computing resources; every user has to make a username and a password. The admin users can search the directory and access the central and departmental file servers, apps and printers across the network. It also makes sure the IT security is in good strength. Account management lowers the computing costs by reducing the number of servers needed for their department.

When deciding how to grant access to users, the main concept is limiting access. Users should be granted only based on level of permissions they need in order to perform their job duties. By placing users into groups according to their job titles in an organization, this will provide these users access to company information and resources in the network. These group assignments will allow an organization to give users only what they need to complete their job tasks and ensure that unauthorized access is limited.

The User Domain: is a network in which all user accounts are assigned using Active Directory. Only the IT Department can grant

Active Directory Users and Computers: This tool creates and manages Active Directory users, computers, and groups. You can also use this tool to create Organizational Units

internal and external users to whom access to the organization’s network, data or other sensitive

It is generally limited to a geographic area such as a writing lab, school, or building. Rarely are LAN computers more than a mile apart. In a typical LAN configuration, one computer is designated as the file server. It stores all of the software that controls the network, as well as the software that can be shared by the computers attached to the network. Computers connected to the file server are called workstations. The workstations can be less powerful than the file server, and they may have additional software on their hard drives. On many LANs, cables are used to connect the network interface cards in each computer; other LANs may be wireless.

Account Management- Account Management manages what resources the user can access. It also allows users to only have to remember a single user and password. It allows users to access to central file servers, main printers and applications.

C. Permissions and Rights (What they can do. . Which operations they can perform on a system.)

The organization has a security objective of protecting the database from being altered. Since the data is held in the system, there are regulations that have been set to the users, and there are also limits to the functions that each user performs. In this case, there are three categories of users each with clearly defined responsibilities. For instance, the administration team has been given full control of the application in that they can even alter codes and perform any variations to the database objects. The other groups of users are the executives; these have the ability to access all the information

The system administrator will monitor performance of systems and provide security measures such as troubleshooting and maintenance. He will also help users to diagnose and solve their problems. He will be involved in adding, deleting or modifying user account information and resetting passwords. He will design and put into place systems, network configurations and network architecture.

Roles are normally created for the varying business roles or functions. Performance of certain activities is limited to certain job roles or functions. Staff members given the task to undertake such activities are given user accounts unique to them to undertake these roles (Ferraiolo, Kuhn & Chandramouli, 2003). This is normally under the discretion of the immediate supervisor through dialogue with the overall supervisor of a particular division or department.