Advertisement
I found new work at a software company, the problem is there is no solid system infrastructure, all we have is a firewall and a 2008 r2 server, the anti - malware that we use is a simple Microsoft Security Essentials, all of the workstations have automatic IP’s and administrative accounts. I would like to ask the community on where should I start if I want to establish a good infrastructure in the company, i.e domains, file servers etc. thanks in advance for your help<\/p>","upvoteCount":4,"answerCount":13,"datePublished":"2018-01-08T23:15:27.000Z","author":{"@type":"Person","name":"jaylorea","url":"https://community.spiceworks.com/u/jaylorea"},"suggestedAnswer":[{"@type":"Answer","text":"
I found new work at a software company, the problem is there is no solid system infrastructure, all we have is a firewall and a 2008 r2 server, the anti - malware that we use is a simple Microsoft Security Essentials, all of the workstations have automatic IP’s and administrative accounts. I would like to ask the community on where should I start if I want to establish a good infrastructure in the company, i.e domains, file servers etc. thanks in advance for your help<\/p>","upvoteCount":4,"datePublished":"2018-01-08T23:15:28.000Z","url":"https://community.spiceworks.com/t/fresh-start/627489/1","author":{"@type":"Person","name":"jaylorea","url":"https://community.spiceworks.com/u/jaylorea"}},{"@type":"Answer","text":"
Start with a needs analysis. How many users, how many devices, how much data needs to be stored (and consider growth over at least three years), whether the backbone is sufficient (what kind of cabling/switching is currently in place), and where the company will likely be in 5-10 years.<\/p>\n<\/li>\n
Assess the current hardware. The 2008 r2 server should likely be upgraded (unless it’s running on new hardware, but I doubt this is the case). How many switches, APs, etc. will be needed to provide proper coverage to the office? Do you need new wiring?<\/p>\n<\/li>\n
Contact a vendor to get quotes on the necessary hardware, or if you’re comfortable you can assemble quotes yourself for most items.<\/p>\n<\/li>\n
Present a report to management of the current state, the problems, and what you propose to solve the issue (including a budget).<\/p>\n<\/li>\n<\/ol>\n
There are lots of things to consider depending on your environment, but with the few details provided this is simply a general answer to get you started. I’m sure others will chime in with more details.<\/p>\n
I recommend having a dedicated server rack, using proper hardware, and doing things correctly from the start - don’t head to Best Buy and mickey mouse something together like we have all seen before.<\/p>","upvoteCount":1,"datePublished":"2018-01-08T23:37:15.000Z","url":"https://community.spiceworks.com/t/fresh-start/627489/2","author":{"@type":"Person","name":"taylormunroe2","url":"https://community.spiceworks.com/u/taylormunroe2"}},{"@type":"Answer","text":"
Congratulations! You can start the company’s infrastructure.<\/p>\n
Beforehand, check on how they work:<\/p>\n
how many users/workstations<\/p>\n<\/li>\n
how everything was networked/connected<\/p>\n<\/li>\n
how they share files<\/p>\n<\/li>\n
how to access which resources<\/p>\n<\/li>\n<\/ul>\n
You will have to present to management the need for central management/domain controller. What impact, upgrade or advancement it will bring to the company. Start in searching using your favorite search engine. Here is one from Google<\/a> .<\/p>\n Is the Server 2008 R2 legally acquired? What is the reason why it was bought? Why is it there in the first place? Is it there to only provide DNS/DHCP or is the router/firewall doing that?<\/p>","upvoteCount":1,"datePublished":"2018-01-08T23:46:15.000Z","url":"https://community.spiceworks.com/t/fresh-start/627489/3","author":{"@type":"Person","name":"vasanchez","url":"https://community.spiceworks.com/u/vasanchez"}},{"@type":"Answer","text":" Below are just on the top of my mind, in layman’s terms and no way complete:<\/p>\n First and foremost is network security. You can enforce password policy/security access to files and other resources, based on computers, users or groups.<\/p>\n Centrally managed system will limit user control over their system giving them access to only perform their duties. Why is this good? It also limits what they can do to break the system. It also, in some ways, limit the infection of the system should there be one.<\/p>\n Roaming profile can be set. User can login to any domain joined computer and retain his preferences.<\/p>\n Folder redirection can be set. User can login to any domain joined computer and he will have access to his Documents and other files. You can also back this up as this is centrally located in a server folder share.<\/p>\n Aside from Group Policy Objects (GPO) which you can set, you can also set up Group Policy Preferences (GPP). GPO sets/adjusts what your computer/users can do to computer, how they behave, install or update supported softwares, whitelist/blacklist programs from running, etc. GPP are the ones which you normally do with scripts like mapping drives, creating shortcuts, copying file/s to user/computer folder.<\/p>\n Setting up update update through WSUS will also help manage approved updates and perhaps improve bandwidth.<\/p>\n Also note that there’s a limit in Microsoft Security Essentials usage in a company, you can only use it legally upto 10 devices, unless MS has removed the limit which I am unaware of. Reference: MICROSOFT SOFTWARE LICENSE TERMS - Microsoft Support<\/a> . First 2 statements in 1. INSTALLATION AND USE RIGHTS reads and I quote:<\/p>\n Home Use.<\/strong> If you are a home user, then you may install and use any number of copies of the software on your personal devices for use by people who reside in your household.<\/p>\n<\/li>\n Small Business.<\/strong> If you operate a small business, then you may install and use the software on up to ten (10) devices in your business.<\/p>\n<\/li>\n<\/ul>\n<\/blockquote>","upvoteCount":1,"datePublished":"2018-01-09T00:11:17.000Z","url":"https://community.spiceworks.com/t/fresh-start/627489/4","author":{"@type":"Person","name":"vasanchez","url":"https://community.spiceworks.com/u/vasanchez"}},{"@type":"Answer","text":" Have you setup a domain? Are you comfortable with setting up one? If not, I urge you make a research first. How to set it up and best practices. There are a lot on how-tos and best practices here in Spiceworks though a lot of it is targeted to specific setup/jobs.<\/p>\n The link below might be of some help in setup:<\/p>\n\n
\n