I am helping a church design a network that will work for them. It will be a peer-to-peer network, with a main computer that will be used as a file server, with XP Pro. (In fact they are going to upgrade all of the computers to XP Pro to continue getting MS support for the next few years.)
I know how to set up the server with permissions so certain users can be authorized to see certain data. That is not the issue. The issue is that now the church has decided that they want to use the server computer on Sunday for a different purpose as it is normally used for - as no one is at work in the church's offices on Sundays and it does not need to act as a file server that day.
They want to hook up a web cam to the server, and then have the server run software that then forwards the signal to the internet. This in itself is not the issue either, as they have the software and know how to get this done.
The issue is that I don't want whoever is running the web cam on Sunday to have access to the data that is stored on the server. And a further objective is to allow this user as little interaction as possible with the server.
So, I have ideas, but am not sure if this will work. Help me out, please:
The server already has two administrator accounts. I am thinking of making the files on these administor accounts private, and then creating a limited account for the Sunday operator. However, I do not want anyone to have to change users, or log on or off, or reboot the server - as I want as little interaction as possible - because I don't trust anyone not to mess with things.
If I have the server boot up to this limited account by default, and run from that account all the time, will I be able to still access the data from a 'client' computer ( remember the data is stored under an administrator account)? Or will I be blocked?
Does anyone know this for SURE? Can you direct me to a website that might explain this situation a little better for me? Or have another idea how I can set this computer up to accomplish these two functions and still keep the data secure, as well as not allow the Sunday user to change anything on the Server?
Thanks for listening, and all of your help!
EDIT: I just had an idea. What if both the Administrator account and the limited webcam account were running at the same time. That would allow the clients to still access their data as the admintrator account would be operational. And an unautherized person would not be able to access this acount as it would be password protected. And then the webcam operator would simply click on his account and be able to do his thing on Sundays. Hmmmmmm.... Another advantage to this settup would be that the backup software on the administrator account would still be able to run also.