Howdy y’all – I am the publisher of the Microsoft Small Business Specialist Primer and I like to hold vitual book readings! So here is today’s passage on customer templates! BTW – my SBS 2008 book is now here….
Custom User Templates
You can create your own custom user templates by clicking the Add template
link while completing the Add User Wizard or by going to User templates and
clicking the Add template link, which will launch the Add Template Wizard. The use of custom templates is very exciting and very powerful. Why? Let’s answer this question with a tad of Texas story-telling by the campfire. Back when knights were bold and Microsoft blue badges owned ALL the gold, there was a redhead (NetWare) on the block that was a huge threat. There were more Certified NetWare Engineers (CNEs) than Microsoft Certified Professionals (MCPs). What all CNEs knew to do was create the “perfectly” configured account (e.g., ACCT) for a department (e.g., Accounting) and then disable the account. When the customer hired a new employee in the accounting department, the ACCT account was copied over for the new user and renamed (e.g., Brisker Brelsford). This was the user template concept in its early format. Today, with SBS, you have a pretty interface to accomplish the same result. And guess what? The user templates in SBS 2003 are nothing more than disabled user accounts.
It makes sense to create custom templates that meet your needs like the accounting example. You might have a template designed for each department. You can even export templates between customer sites by selecting the Export Templates link in the Server Management console. (Server Management, Advanced Management, Migrate Server Settings) This would be really cool if you were the reseller of a line-of-business application (e.g., Microsoft Small Business Financials) and your directory permissions were the same at each client and the “accounting” template could be used at any client site. You get the point!
Use templates to make changes to a user’s permissions. This is good for updating a user as needed or updating a user account that was migrated over from SBS 2000 and doesn’t have the full SBS 2003 experience going for it yet! That is, if you followed the migration approaches discussed in Chapter 5, the user account brought forward would not have an SBS 2003 user template applied to it (and that is part of why you have to go over the “To Do List” again after an upgrade) and when launching the Change User Permissions Wizard, you can apply a template to already existing user accounts.
IMPORTANT: Once again. Use User templates at all times if pos‑
sible. This way you will have consistent permissions assigned across
Chapter 6 Securing Windows Small Business Server 2003
all user accounts, whereas assigning them manually leaves great room for error.
Harry Brelsford, CEO at SMB Nation (www.smbnation.com)
MBA, MCSE, CNE, CLSE, CNP, MCP, MCT, SBSC (Microsoft Small Business Specialist)
PS – my Small Business Server 2008 (SBS 2008) book is now here!