 |
» |
|
|
|
The Windows NT or LAN Manager administrator
and the NetWare supervisor are equivalent concepts. These are the
people responsible for setting up and managing the network; they
are allowed to configure the network and access all network resources. How people are given this status varies. With NetWare, there
is a single user account with the username supervisor. Several people
can have supervisor status on a server—they can all use
the supervisor account to log in, or the original supervisor can
designate these people as supervisors by giving their user accounts
security equivalence to the supervisor account. When an account
is given security equivalence to another account, the user gains
all the access rights of the other account. With LAN Manager, you give administrator status (called
admin privilege) to a user by giving the user's
account the admin privilege level. Each LAN Manager user
account has one of three privilege levels—admin, user,
or guest. All users whose accounts have admin privilege are administrators,
and have full administrative power on the server. With Windows NT, you give administrator status to
a user by assigning the user to the Administrators group. Each Windows NT
user account is assigned one or more of eight or more groups —
administrator, user, guest, server operator, account operator, print
operator, backup operator, or replicator. All users in the administrators
group are administrators, and have full administrative power over
the system. Operators and Managers | |
NetWare, Windows NT, and LAN Manager all
allow for operators (also called managers),
users who have authority to perform a limited number of administrative
tasks. Operators have more power on the network than regular users,
but less than full administrators or supervisors. With NetWare, you designate people as operators or managers
by using commands in menu utilities; each type of operator is specified
by a different command. With LAN Manager, you make someone
an operator by giving him or her operator privileges
in his or her user account. With Windows NT, you make someone
an operator by putting them in one of the operator groups. The following table shows the types of operators in each system,
explains the abilities of each type, and shows similarities to the
other system, if any. Table A-1 Differences
in Admin NetWare, Windows NT, and LAN Manager NetWare | Windows
NT | LAN
Manager | Abilities |
|---|
Print
server operator | None | None | Can manage a print server,
a workstation that controls printer queues that send print jobs
to printers attached to the print server or to other workstations.
With Windows NT and LAN Manager, all network printers
are attached to regular servers so there are no separate print servers
or print server operators. | Queue
operator | Print
operator | Print
operator | Can manage printer queues and print
jobs, changing the order of jobs or deleting them. With Windows NT
and LAN Manager, print operators can also create and delete
printer queues. With NetWare, different queue operators can be assigned
for different queues; with Windows NT Advanced Server
and LAN Manager, a print operator can manage all printer
queues on a server or in a domain. (For information about domains,
see "Domains," later in this appendix.) | File-server console operator | Server operator | Server operator | Can perform some server
management tasks, such as stopping services on the server or shutting
it down entirely, and can view information about the server and
the connections to it. | User
account manager | Account
operator | Accounts
operator | Can manage and modify user accounts.
With NetWare, user account managers can manage only the users assigned
to them by the supervisor. With LAN Manager, accounts operators
can manage all user accounts on the server or in the domain, and
can also create new accounts. With Windows NT, account
operators can manage all the server's user and group accounts
except the user accounts of Administrators or the local groups of
Administrators, Server Operators, Account Operators, Print Operators
or Backup Operators. They cannot assign user rights. | Workgroup
manager (NetWare 386 only) | None | None | Responsible for a workgroup of people.
The workgroup manager can create user accounts for these users,
modify and delete those accounts, and create and manage printer
queues for the group. The workgroup manager can manage only the
user accounts he or she creates. Windows NT and LAN Manager
have no equivalent, although some of the workgroup manager's
tasks are similar to the tasks of account(s) operators and print
operators. | None | None | Comm operator | Can manage communication-device
queues and requests, changing the order of requests or deleting
them. There is no NetWare equivalent. Windows NT and LAN Manager
for UNIX Systems do not support communication-device queues or comm
operators. |
NetWare, Windows NT, and LAN Manager also
provide a way for you to give a person limited administrative powers
over some network directories. In all three systems, you do this
by assigning the person a certain permission (called trustee right
in NetWare) for the directory. With NetWare, you assign the S (Supervisory) permission. With
Windows NT, you can assign Change permission, which allows
a user to read, add and change files in a directory. With LAN Manager,
you assign P (Change Permissions). In each system, this permission
lets the user grant permissions to other users for the directory.
With NetWare, when you grant S permission to a user for a directory,
the user will have the S permission for all subdirectories in the
directory tree under that directory as well; with Windows NT,
you can limit change permission to a single file or directory; with
LAN Manager, you can limit P permission to a single directory. With Windows NT, user rights control the specific
rights of administrators, server operators, backup operators and
print operators. For more information about permissions, see "Controlling
Access to Network Directories," later in this appendix. |
Printable version
