Re: Using a Group Policy in an XP Workgroup

From: David M (DavidM_at_discussions.microsoft.com)
Date: 06/26/05 

Date: Sat, 25 Jun 2005 16:18:01 -0700

Thanks Colin & thanks Doug

You are correct in saying that I wantng to put permissions in place for
files and shares.

I have done a bunch of research and I am coming to the conclusion that I
really need a domain. I actually have a copy of SBS 2003 and I suppose I have
tended not to deploy that because I am not a techie type and was afraid that
the level of complexity in setting up and maintaining would be too great.

Do you know how hard it would be for me to implement SBS 2003? 

-- 
David M
"Colin Nash [MVP]" wrote:
> 
> "David M" <DavidM@discussions.microsoft.com> wrote in message 
> news:EF3EAE7A-5DE6-4491-8C6D-DB7A7166860F@microsoft.com...
> >I have a small office network all on XP Pro and all in the same Workgroup. 
> >I
> > do not run Active Server Directory and do not operate a Domain.
> >
> > Two of the PC's operate as file servers. I want to manage access to 
> > folders
> > on the file servers by allowing certain groups and not others.
> >
> > I want the members of the Groups to be Workgroup PC's. In other words,
> > whomever is logged on to the PC will have access to the folders.
> >
> > I would also consider using Users as the members of a Group if I could 
> > work
> > out an easy way to create a single user entity for each employee that 
> > could
> > operate across the whole Workgroup.
> >
> > I know how to add in snap-ins to MMC on the file servers but am not sure
> > which ones to add and how to configure them to achieve the above.
> >
> > Any help would be appreciated.
> >
> > -- 
> >
> > David M
> 
> Sounds like you are asking how to put permissions on files and shares.  This 
> isn't really a Group Policy thing.  See 
> http://support.microsoft.com/default.aspx?scid=kb;en-us;308418 for info. 
> Also see http://support.microsoft.com/?kbid=290403 (you may need to change 
> XP's default behavior of authenticating as a guest while installed in a 
> workgroup.)
> 
> Without a domain, you will need matching accounts on all PCs for all users 
> (same names+password) - this means that if the users all have their own 
> accounts, you could have a lot of work to do to keep things in sync.  It 
> would be simplified if everyone just used a generic "user" account on each 
> PC (in fact, you could set up Windows to automatically log on with that 
> account.)
> 
> If there's nobody else on the network, and you don't want to be very 
> granular (i.e. Bob can access FolderA, Susan can read FolderA but not make 
> changes, but she can do anything on FolderB) you could just set your 
> permissions to allow "Everyone"
> 
> As for " I could work out an easy way to create a single user entity for 
> each employee that could operate across the whole Workgroup." - you have 
> basically described one of the main reasons for getting domain.  Microsoft 
> does have a Server product designed (and priced) for smaller environments 
> that allows you to set up a domain.  Small Business Server 2003: 
> http://www.microsoft.com/windowsserver2003/sbs/default.mspx (no I don't work 
> for them and I'm not trying to sell it to you!!, just making sure you know 
> that there is a product.)
> 
> 
> -- 
> Colin Nash
> Microsoft MVP
> Windows Shell/User
> 
> 
> 
>

Relevant Pages

  • Ntfs Permissions on a Server 2003 System
    ... l have a huge file archive on an accounting office full of office documents ... I created usernames for each user on workgroup and l moved whole documents ... l want to apply user based security over ntfs permissions on user names. ... When l want to change the user permissions on those folders, ...
    (microsoft.public.windows.server.security)
  • Re: moving file server to new domain
    ... You can use robocopy /SEC to copy permissions. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I need to migrate a few file servers from one AD domain to a new AD ... How can I easily set up the permissions on the files, folders and ...
    (microsoft.public.windows.server.general)
  • Folders Permissions
    ... folders, y file servers, the user and permissions. ... Leonardo ...
    (microsoft.public.win2000.security)
  • Re: Using a Group Policy in an XP Workgroup
    ... Implemented as per Steve's web site and all working OK. ... I agree Lanwench - I think a PDC will be the better long term outcome. ... I ahve just removed the default Permissions for the Everyone group and now I ... >>>> Two of the PC's operate as file servers. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hiding a file
    ... >File>Open passwords are MUCH stronger than internal passwords. ... >servers may be able to set permissions on file server drives (dunno, ... >well-administered Windows file servers that's seldom if ever the case. ...
    (microsoft.public.excel.worksheet.functions)