Re: Re: Re: security products

[chmod1777 () invalid-host name]

I agree with Dan that if it can be read, even casually, one time by someone then it can be copied. 

I totally disagree however, that you "NEED" to trust your employees. You don't need to, and shouldn't. Every internal 
breach we ever hear about, was from a "trusted" employee.

The security needs to be layered. Yeah, you can passwd protect the docs themselves (even if it isn't totally safe). But 
add directory permissions. Someone mentioned AD. I'd use AD and setup groups. I'd organize the files based on need. Not 
everyone needs access to every file in a directory, and shouldn't have that access just so it makes it simpler for the 
admin. That's just BEGGING for something to happen IMO. It needs to be spread out. And there are likely employees that 
have absolutely no need for anything on that fileserver, and should be completely blocked from it. 

> From the sounds of it, it's a smaller company. Hopefully they have an AD domain setup, and not everyone is their own 
> local admin. But we all know how that goes... 

YMMV

Kurt Kessler