This question is a bit broad, but I'm hoping someone can point me in the right direction. I administer a small LAN at work with 15-20 machines on it. They are running Windows XP - Windows 8 and I have a Linux based NAS for backups attached as well.
In the past, every user was highly trusted and my main concern was making sure files were easily accessible. I did things like grant "Everyone" full permissions on the root of each drive. Now, we are bringing on some semi-trusted personnel that I don't want to have access to "everything" on every computer in the network. So the questions are:
- How can I effectively restrict access to certain areas?
- How can I allow the trusted users to still easily access restricted content?
- How can I secure the Linux backup?
- How can I protect the network against disgruntled employees who may still have access?
I've tried some Googling, but I'm finding information mostly about protecting against external threats. Any pointers are greatly appreciated. Thanks.
Update: My first step has been to remove the "Everone" group from the NTFS permissions for sensitive files. This effectively protects them from access, but it is also a pain. I would like to be able to authenticate (via a password maybe) to gain access if needed. I've come across Windows Active Directory which might be what I'm looking for, but it looks like a beast to try to learn and implement. Am I barking up the wrong tree here?