Re: W2K3 and workgroup shares

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 09/23/04 

Date: Thu, 23 Sep 2004 14:17:11 -0500

Subnets would not resolve the problem. The best solution would be to upgrade to XP
Pro. I am not real familiar with XP Home as it is more of a home/consumer operating
system that lacks features [and lower price] that provide secure network access in XP
Pro. XP Home uses "simple file sharing" for network access that gives every user
guest access for network shares on an XP Home computer. You might be able to work
around that by modifying ntfs permissions on the XP Home computer folders where you
want to control access. I don't know for sure. You can set some ntfs permissions in
an XP Home computer by booting into safe mode as an administrator. The link below
explains this more. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

"Michelle" <Michelle@discussions.microsoft.com> wrote in message
news:6BCD8203-71CC-4E2C-B2AC-2FF2D141F335@microsoft.com...
> Thanks for the reply. Unfortunately, these guys don't logon to the server so
> they don't have server userids and passwords...just passwords to their w2k
> and xp (home edition) workstations.
>
> The shares that need to be created aren't on the server, they are on their
> workstations. But apparently only the w2k pc's have the ability to add a
> group (or user) for share access to their c:\ drive and folders. I have
> found that xp home addition (which half of the users have - don't ask me why
> they did this) does not provide an option for selecting certain groups or
> users to view someone's c:\ drive shares....it either everyone can see the
> share in the workgroup or no one can.
>
> I guess the tricky part to my problem is that it is c:\ drives and folders
> that they want
> share.
>
> Would subnets resolve my problem (put the two groups on different ones) or
> should I tell them they all need to upgrade the workstations to XP
> Professional (I have both Home and Professional edition at my house and the
> Pro version, along with W2K pcs, allows for group and user sharing of c:\) ?
>
> "Steven L Umbach" wrote:
>
>> In Local Users and Groups on the server create your two groups and add the
>> appropriate members to each group. Then when you create shares you can add the
>> appropriate groups with the needed permissions to the share. Make sure that the
>> users
>> and everyone group is not included in the share permissions. You can also assign
>> permissions to printers that are being shared in the printer's
>> properties/security.
>> Ntfs permissions apply to all user access to a folder while share folder
>> permissions
>> apply only to network access and the two should be used together to secure a
>> computer
>> and it's resources. When share and ntfs permissions are applied the most
>> restrictive
>> of the two will apply to a user/group. Since you are in a workgroup, you will have
>> to
>> add all the user accounts and groups to each computer offering shares or sharing a
>> printer. The logon name and password must be the same on all computers or access
>> can
>> be denied. If a user changes their password, it will have to be changed on all
>> computers the user accesses or logs onto. That is the disadvantage of a workgroup.
>> If
>> you had a domain controller and joined your computers to the domain then user
>> accounts, groups, and policies could be managed centrally on the domain
>> ontroller. --- Steve
>>
>>
>>
>> "Michelle" <Michelle@discussions.microsoft.com> wrote in message
>> news:83EFEF16-0B49-41D8-B99D-7C4A57725189@microsoft.com...
>> >I have a W2K3 server with a workgroup made up of about 15 people. I need to
>> > divide the users up into two security groups - one that is the administrative
>> > group (president, secretaries, etc) and the other group would be the
>> > engineers.
>> >
>> > I want the Administrative group to be able to accesss all the engineers
>> > files and their local printers, but the Engineer group can only access files
>> > and local printers of others in the Engineer group.
>> >
>> > How is the best way to proceed setting this up (if it can be done at all) ?
>> >
>> > Thanks for any advice
>>
>>
>>

Relevant Pages

  • Re: Grant file sharing permissions
    ... You can control access via NTFS permissions, ... You can set up the shares themselves as 'hidden' if you put a $ at the end ... > rights to access them could not see that folders. ...
    (microsoft.public.win2000.file_system)
  • Help
    ... The NTFS permissions are ok. ... They can roam around the shares and create ... folders and so on. ... But how do I give them the right to actually create the shares and list them ...
    (microsoft.public.windows.server.active_directory)
  • Re: Limit user access to server
    ... > administrator access to the server. ... > group permissions from the folders that you want to control access to OR ... > change the ntfs permissions of the users group and user account ... > Policies can also be used to restrict what applications a user can install ...
    (microsoft.public.security)
  • Re: Cannot share system folder
    ... > I set, on a Win XP Home computer, the complete C drive to ... it will use the NTFS permissions to block shared acess to certain folders. ... Simple File Sharing is enabled all the time. ... And it 'shields' you from the big bad NTFS permissions (security tab. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Folders and files security
    ... analysis with the users and then predefine directories for the main ... the NTFS permissions and their naviagating the User object picker. ... > I am running a Win2K Server with a few WinXP Pro clients. ... > I want to enable the end users to assign permissions on folders they will ...
    (microsoft.public.security)