Data Security and Logging

[Moonark]

I posted a message similar to this awhile back, and now I actually have some time to implement a plan to secure and audit data that comes into our network. I am looking for a system that I can restrict who can access, modify, read, copy, etc... users data. Should I use Linux or Windows AD... I kinda need the pros and cons for both

 

[Woodie]

At some point, you'll have to provide more detailed specs. Like where/how the data enters the organization, and where it's stored, and how it will be accessed.

Windows NT/2K provide share and file-level detail, allowing you to control exactly who has Read, Write, change and the ability to DENY any of those access-types. In order for it to work, you need a Windows domain, though.

Auditing & permission granularity are both better on W2K.

--Woodie

 

[sharkbitz]

Dummy users need Windows based file sharing. To tell you the truth, it's alot easier, depending on the application of the data. For instance, if you are sharing spreadsheets, documents, presentations, etc., go with a windows based sharing. Make sure to setup a tape backup rotation.

You could use Linux however (using Samba/NFS/FTP), but it's more difficult to deploy. Only advantage here is that it's free.

If you have the budget, use Win2k. If you're doing a global/internet solution for data sharing, you may want to consider a VPN if you don't already have one.