Windows Server 2003 Security: A Technical Reference

Creating Custom Roles

The default roles available on Windows Server 2003 will not fulfill the needs of the organization to match access to the role a user plays. To simplify the management of computer resources and create custom roles, use these steps:

1.	Determine which custom roles are necessary. Custom roles may be administrative, such as a Help Desk role to assist in managing computers and instructing users, or they may relate to job functions in individual departments, such as Accountants or Accounting Clerks.
2.	Determine the computer access and the resource access required by each group to perform its role. Use these questions to help you do so. Do its members need access to every computer? Do they need access to specific resources on ...