Organization of a local network of a small enterprise?

Question

System administration

Good evening!
I came to enikeit in a small organization - a mini-hotel.
Initial data:
6 computers, about 10 permanent users. There are computers that are shared by several users. OS everywhere Windows 7.
1 server - 1c, file storage. windows server.
A couple of MFPs, a couple of printers.
Based on all this, there are a number of questions purely from experience, who thinks I'm wondering:
1. Is it worth raising a domain? Now every computer has a single user without a password. Pros and cons of the domain in this case?
2. What is the best way to organize file storage? Now people create a bunch of files locally and only occasionally drag everything reluctantly to a server, if necessary, exchange it. How to do better? Clean up local folders like Desktop?
3. At the end of the year, the license for antiviruses on all PCs will expire. I plan to order something so that they can buy it, but the problem is that the server is not the one who distributes the Internet - will it be possible to put the necessary anti-virus software there and thereby secure the entire network?
What other recommendations would you personally give on organizing such a network? Thanks in advance

Answer 1

1. IMHO, it's worth it, especially if one user can log in from different computers (roaming profiles are also good). Passwords are required, as well as, at least, versioning (history of edits) in documents.
2. If there is no introduction of a workflow system in the nearest plans and you don’t want roaming profiles, then the network folder (s), IMHO, is mandatory for enterprise documents (a personal file can be stored locally) with a regular backup and a well-established server recovery procedure in case of, for example, a failure screws/motherboard. You can try using folder and file synchronization if users complain about slow network speeds.
3. In principle, it is possible to implement anti-virus scanning (and, for example, accounting / blocking) of all traffic and network files only through the server, but the probability of infection of workstations will be higher than if the anti-virus worked locally - flash drives, packaged viruses, etc. the server can't check.
4. Read Law No. 152-FZ - in my opinion, it’s a very big trick for small businesses in general, and for mini-hotels it’s very, very big, because they are required to collect and process personal data (transfer for processing by other operators) and in few places it is done manually on paper.

Answer 2

It would be possible to pay attention to the solution from Microsoft in the face of Windows Small Business Server
Everything that may be needed to organize a small local network is already configured in it:
- file storage;
- settings and control of user access (to the Internet, to files, to computers);
— anti-virus protection;
- updates;
- backup;
- mail server;
— web server (internal and external site of the organization).

Answer 3

To distribute the Internet, it is better to put a router.
Run WSUS on the server and distribute updates to other machines from it. You will never secure the network with an antivirus, the network must be “secured” with a competent setting.
And do not forget to disable unnecessary services.
You can install OpenVPN and connect to the server through it. Set long correct long passwords.

Answer 4

1. In principle, it is not worth it.
2. Look towards roaming user profiles
3. WSUS, local security policies and antivirus will suffice. Well, you can still organize some simple backup.

Answer 5

1. I think it's worth raising the domain. Reasons - the answer to question number 2.
2. Set up roaming profiles in the domain. This is convenient if:
a) users work on different computers all the time;
b) when “their own” computer breaks down, the user sits down at a “foreign” one and feels at home there.
In addition to roaming profiles, you redirect the “My Documents” folder to the server, explain to all users that if they do not want to lose the fruits of their work, they need to store the necessary information in my documents.
All this is relevant only if you have RAID on the server (: Otherwise, the reliability of storing information on the server is the same as storing it on a regular workstation.
3. As for the antivirus, I will say the following: it is better to install it on all machines. Only on the server, it will not solve anything, even if this server would be a gateway to the Internet. I don’t have any antivirus at all in my office at the file washer. it is installed on all machines on the network, and only those in the domain have access to the server. That is, the file on it is checked by client machines during reading.

Answer 6

I don't have an organization of 30 people behind me
and I don't want to.
Storing files on a shared network drive ...
everyone is happy and there is almost no hassle, both servers have become nix

Answer 7

Thank you all very much for your advice!
I nevertheless decided to start by raising the domain. Tell me, please, also from experience - what difficulties did you encounter in the first place? Are there any pitfalls? How long will the whole operation take? The fact is that the hotel is a specific place where work is always in full swing, even on weekends and at night, the receptionist is on site. Will there be difficulties when raising a domain in working with 1C? (well, for example, access to databases on the server will suddenly fall off or something else :)

Answer 8

1C 8 or 7? I hope not file, but on MS SQL?