how to given user account permission in 2003
How to Give User Account Permissions in Windows Server 2003
Introduction
Windows Server 2003 is one of Microsoft’s older server operating systems used for managing users, files, printers, and network resources in organizations. In a network environment, administrators often need to give permissions to user accounts so users can access shared folders, printers, applications, and administrative tools securely.
User permissions help administrators control:
Who can access files and folders
Who can install software
Who can manage printers
Who can log in to the server
Who can access network resources
Who can modify or delete data
This guide explains step-by-step how to give user account permissions in Windows Server 2003.
Types of Permissions in Windows Server 2003
Before assigning permissions, it is important to understand the main types of permissions available.
1. NTFS Permissions
NTFS permissions are used on drives formatted with the NTFS file system. These permissions control access to files and folders.
Common NTFS permissions include:
Full Control
Modify
Read & Execute
List Folder Contents
Read
Write
2. Share Permissions
Share permissions are used when folders are shared over the network.
Common share permissions:
Full Control
Change
Read
3. User Rights Assignment
These permissions control system-level tasks such as:
Log on locally
Shut down the server
Backup files
Change system time
Requirements Before Assigning Permissions
Before you start:
Install Windows Server 2003
Create user accounts
Log in as Administrator
Ensure the disk is formatted as NTFS
How to Create a User Account in Windows Server 2003
Before assigning permissions, create a user account.
Step 1: Open Computer Management
Click Start
Right-click My Computer
Select Manage
Step 2: Open Local Users and Groups
Expand System Tools
Click Local Users and Groups
Select Users
Step 3: Create New User
Right-click inside the right pane
Click New User
Enter:
User name
Full name
Password
Confirm password
Select:
User cannot change password (optional)
Password never expires (optional)
Click:
Create
Close
The user account is now created.
How to Give Folder Permissions in Windows Server 2003
Folder permissions are commonly used in organizations.
Method 1: Assign NTFS Permissions
Step 1: Create a Folder
Example:
Open My Computer
Open *C:*
Create folder named:
CompanyData
Step 2: Open Folder Properties
Right-click the folder
Select Properties
Click the Security tab
Step 3: Add User Account
Click Add
Type the username
Click Check Names
Click OK
Step 4: Assign Permissions
Select the user and choose permissions.
Common Permission Options
| Permission | Description |
|---|---|
| Full Control | Complete access |
| Modify | Read, write, edit, delete |
| Read & Execute | Open and run files |
| Read | View files only |
| Write | Create files |
Example:
To allow editing but not full administration:
Check Modify
Check Read & Execute
Check Read
Check Write
Click:
Apply
OK
The user now has NTFS permissions.
How to Share a Folder with Permissions
Step 1: Open Sharing Tab
Right-click the folder
Click Properties
Open the Sharing tab
Step 2: Share the Folder
Select Share this folder
Enter share name
Example:
CompanyData
Step 3: Configure Share Permissions
Click Permissions
Remove Everyone if needed
Click Add
Add the user account
Assign permissions:
Read
Change
Full Control
Click:
Apply
OK
The folder is now shared on the network.
Difference Between NTFS and Share Permissions
| NTFS Permissions | Share Permissions |
|---|---|
| Applied locally and remotely | Applied only over network |
| More secure | Less detailed |
| Works on NTFS drives | Works on shared folders |
When both permissions exist, the most restrictive permission applies.
Example:
NTFS = Full Control
Share = Read
Final permission = Read
How to Give Administrative Permissions
Sometimes users need administrator rights.
Step 1: Open Computer Management
Click Start
Right-click My Computer
Select Manage
Step 2: Open Groups
Expand Local Users and Groups
Click Groups
Step 3: Open Administrators Group
Double-click Administrators
Click Add
Step 4: Add User
Enter username
Click Check Names
Click OK
The user now has administrator privileges.
How to Give Remote Desktop Permission
Users may need remote access to the server.
Step 1: Enable Remote Desktop
Right-click My Computer
Select Properties
Open the Remote tab
Check:
Allow users to connect remotely to this computer
Step 2: Add Remote Desktop Users
Click Select Remote Users
Click Add
Enter username
Click OK
The user can now connect remotely.
How to Assign Printer Permissions
Step 1: Open Printers
Click Start
Open Printers and Faxes
Step 2: Open Printer Properties
Right-click the printer
Click Properties
Step 3: Configure Security
Open the Security tab
Click Add
Add the user account
Assign permissions:
| Permission | Description |
|---|---|
| Use printer | |
| Manage Documents | Manage print jobs |
| Manage Printers | Configure printer |
Click:
Apply
OK
How to Assign User Rights in Local Security Policy
Step 1: Open Administrative Tools
Click Start
Open Administrative Tools
Select Local Security Policy
Step 2: Open User Rights Assignment
Navigate to:
Local Policies → User Rights Assignment
Step 3: Select a Policy
Examples:
Log on locally
Access this computer from network
Shut down the system
Backup files and directories
Step 4: Add User
Double-click the policy
Click Add User or Group
Enter username
Click OK
The permission is now assigned.
How to Give Access Through Active Directory
If the server is a domain controller using Active Directory, permissions can also be assigned through domain groups.
Step 1: Open Active Directory Users and Computers
Click Start
Open Administrative Tools
Click Active Directory Users and Computers
Step 2: Create Security Group
Right-click the organizational unit
Click New → Group
Enter group name
Example:
SalesUsers
Select:
Global
Security
Click OK
Step 3: Add Users to Group
Open the group
Click Members
Click Add
Select users
Click OK
Step 4: Assign Permissions to Group
Instead of assigning permissions individually:
Open folder properties
Open Security
Add the group
Assign permissions
This method is easier for managing many users.
Best Practices for User Permissions
1. Use Groups Instead of Individual Users
Managing groups is easier and more secure.
Example:
HR Group
Sales Group
Accounts Group
2. Follow Least Privilege Principle
Give users only the permissions they need.
Do not assign Full Control unless necessary.
3. Remove Unnecessary Permissions
Unused permissions can create security risks.
Review permissions regularly.
4. Use NTFS Permissions Carefully
Avoid conflicting permissions.
Keep permission structure simple.
5. Document Permission Changes
Maintain records of:
User access
Group assignments
Folder permissions
This helps troubleshooting and auditing.
Common Permission Problems and Solutions
Problem 1: User Cannot Access Folder
Solution
Verify share permissions
Verify NTFS permissions
Check network connectivity
Problem 2: Access Denied Error
Solution
Ensure user belongs to correct group
Check inherited permissions
Verify deny permissions are not enabled
Problem 3: User Cannot Log In Remotely
Solution
Add user to Remote Desktop Users group
Enable Remote Desktop
Check firewall settings
Problem 4: Printer Access Denied
Solution
Verify print permissions
Restart Print Spooler service
Advantages of Proper Permission Management
Benefits include:
Improved security
Better resource control
Easier administration
Reduced unauthorized access
Better data protection
Conclusion
Giving user account permissions in Windows Server 2003 is an important administrative task. Permissions help secure files, folders, printers, and network resources while ensuring users can perform their jobs properly.
In Windows Server 2003, permissions can be assigned using:
NTFS permissions
Share permissions
Administrative groups
Remote Desktop settings
Local Security Policy
Active Directory groups
Administrators should always follow security best practices by giving only the required permissions and using groups for easier management.
With proper permission management, Windows Server 2003 networks become more secure, organized, and efficient.