Folder Share in Workgroup

I have a small network with Win2003 set as a workgroup server (not AD) with
client PCs that are W2K or XP Pro. There are only 2 logins (besides
admin): staff & Ted (the boss).

Ted wants a private directory on the server, so I created one with full
access for only Ted (& admin). From his PC, he can see the folder & open
the files, but they are read-only and no files can be deleted.

On the server, the user with access is listed as Servername/Ted while his
login to his PC, of course, is Computername/Ted.

With a workgroup, how can I give Computername/Ted full access to the server
share while denying it to others???

there are two places you need to assign rights. Sharing and security. make
sure you assign permissions in both.

--
For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
"Bill" <(E-Mail Removed)> wrote in message
news:OZ$(E-Mail Removed)...
>I have a small network with Win2003 set as a workgroup server (not AD) with
>client PCs that are W2K or XP Pro. There are only 2 logins (besides
>admin): staff & Ted (the boss).
>
> Ted wants a private directory on the server, so I created one with full
> access for only Ted (& admin). From his PC, he can see the folder & open
> the files, but they are read-only and no files can be deleted.
>
> On the server, the user with access is listed as Servername/Ted while his
> login to his PC, of course, is Computername/Ted.
>
> With a workgroup, how can I give Computername/Ted full access to the
> server share while denying it to others???
>

I did. "Everyone" has read permission in sharing, and only Ted (& admin)
have full rights in security. But Ted can only open files "read-only"


"Robert L [MS-MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> there are two places you need to assign rights. Sharing and security. make
> sure you assign permissions in both.
>
> --
> For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services.
> Posting on MS newsgroup will benefit all readers and you may get more
> help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on
> http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> "Bill" <(E-Mail Removed)> wrote in message
> news:OZ$(E-Mail Removed)...
>>I have a small network with Win2003 set as a workgroup server (not AD)
>>with client PCs that are W2K or XP Pro. There are only 2 logins (besides
>>admin): staff & Ted (the boss).
>>
>> Ted wants a private directory on the server, so I created one with full
>> access for only Ted (& admin). From his PC, he can see the folder &
>> open the files, but they are read-only and no files can be deleted.
>>
>> On the server, the user with access is listed as Servername/Ted while his
>> login to his PC, of course, is Computername/Ted.
>>
>> With a workgroup, how can I give Computername/Ted full access to the
>> server share while denying it to others???
>>
>
>

"Bill" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I did. "Everyone" has read permission in sharing, and only Ted (& admin)
> have full rights in security. But Ted can only open files "read-only"

It is because Computername/Ted (which he is using) is not the same thing as
Servername/Ted which only exists on the server and is the account that has
the rights.

My "workgroup" techniques may be a bit rusty but if the Workgroup Names on
all machines match and if the accounts on all machines are spelled the same
and if the matching accounts also use matching passwords then it should work
transparently.

But if that all still doesn't work just make the server a DC, join the
workstations to it, and be done with it. As long as you keep the Domain
design simple and don't try to do more than you know how to do,..it is
*easier* to work with a Domain than it is to work with a workgroup.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


> "Robert L [MS-MVP]" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > there are two places you need to assign rights. Sharing and security.
make
> > sure you assign permissions in both.
> >
> > --
> > For more and other information, go to http://howtonetworking.com.
> >
> > Don't send e-mail or reply to me except you need consulting services.
> > Posting on MS newsgroup will benefit all readers and you may get more
> > help.
> >
> > Bob Lin, MS-MVP, MCSE & CNE
> > How to Setup Windows, Network, Remote Access on
> > http://www.HowToNetworking.com
> > Networking, Internet, Routing, VPN Troubleshooting on
> > http://www.ChicagoTech.net
> > This posting is provided "AS IS" with no warranties.
> > "Bill" <(E-Mail Removed)> wrote in message
> > news:OZ$(E-Mail Removed)...
> >>I have a small network with Win2003 set as a workgroup server (not AD)
> >>with client PCs that are W2K or XP Pro. There are only 2 logins
(besides
> >>admin): staff & Ted (the boss).
> >>
> >> Ted wants a private directory on the server, so I created one with full
> >> access for only Ted (& admin). From his PC, he can see the folder &
> >> open the files, but they are read-only and no files can be deleted.
> >>
> >> On the server, the user with access is listed as Servername/Ted while
his
> >> login to his PC, of course, is Computername/Ted.
> >>
> >> With a workgroup, how can I give Computername/Ted full access to the
> >> server share while denying it to others???
> >>
> >
> >
>
>

The names & passwords DO match, just the local domains are different for the
PC & server. This is such a small setup - just 3 PCs - I didn't bother
with a DC as it seemed hardly worth the effort & of no use. Can't a
workgroup have this kind of share too? I thought maybe it would ask for an
additional login, but it just opens the folder & makes the files read-only.


"Phillip Windell" <@.> wrote in message
news:%23%(E-Mail Removed)...
> "Bill" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> I did. "Everyone" has read permission in sharing, and only Ted (&
>> admin)
>> have full rights in security. But Ted can only open files "read-only"
>
> It is because Computername/Ted (which he is using) is not the same thing
> as
> Servername/Ted which only exists on the server and is the account that has
> the rights.
>
> My "workgroup" techniques may be a bit rusty but if the Workgroup Names
> on
> all machines match and if the accounts on all machines are spelled the
> same
> and if the matching accounts also use matching passwords then it should
> work
> transparently.
>
> But if that all still doesn't work just make the server a DC, join the
> workstations to it, and be done with it. As long as you keep the Domain
> design simple and don't try to do more than you know how to do,..it is
> *easier* to work with a Domain than it is to work with a workgroup.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>> "Robert L [MS-MVP]" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> > there are two places you need to assign rights. Sharing and security.
> make
>> > sure you assign permissions in both.
>> >
>> > --
>> > For more and other information, go to http://howtonetworking.com.
>> >
>> > Don't send e-mail or reply to me except you need consulting services.
>> > Posting on MS newsgroup will benefit all readers and you may get more
>> > help.
>> >
>> > Bob Lin, MS-MVP, MCSE & CNE
>> > How to Setup Windows, Network, Remote Access on
>> > http://www.HowToNetworking.com
>> > Networking, Internet, Routing, VPN Troubleshooting on
>> > http://www.ChicagoTech.net
>> > This posting is provided "AS IS" with no warranties.
>> > "Bill" <(E-Mail Removed)> wrote in message
>> > news:OZ$(E-Mail Removed)...
>> >>I have a small network with Win2003 set as a workgroup server (not AD)
>> >>with client PCs that are W2K or XP Pro. There are only 2 logins
> (besides
>> >>admin): staff & Ted (the boss).
>> >>
>> >> Ted wants a private directory on the server, so I created one with
>> >> full
>> >> access for only Ted (& admin). From his PC, he can see the folder &
>> >> open the files, but they are read-only and no files can be deleted.
>> >>
>> >> On the server, the user with access is listed as Servername/Ted while
> his
>> >> login to his PC, of course, is Computername/Ted.
>> >>
>> >> With a workgroup, how can I give Computername/Ted full access to the
>> >> server share while denying it to others???
>> >>
>> >
>> >
>>
>>
>
>

"Bill" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> The names & passwords DO match, just the local domains are different for
the
> PC & server.

You mean the Workgroup Names? There is no such thing as a "local domain".
The name need to match,....Ok,..well they don't *need* to match,...but see
where I'm going here?,...I am trying to create a simple, straight-forward,
non-vague, "by-the-book" situation here so that it is easier to
troubleshoot.

> This is such a small setup - just 3 PCs - I didn't bother
> with a DC as it seemed hardly worth the effort & of no use.

A DC is almost *always* worth the effort no matter how small the situation
is. The real determing fact is the cost of another machine and the Server
OS and if the people using it have enough skills to at least use it at a
basic level. If you keep it simple it doesn't take much knowledge.
Workgroups are *always* more trouble to deal with.

> I thought maybe it would ask for an
> additional login, but it just opens the folder & makes the files
read-only.

The only other thing I can think of is errors in the Permissions. Double
check them. *Remember* that Share Permissions do not effect the NTFS
Permissions. You can grant every Share Permission in the world to the
user,...but yet the NTFS permissions can still not allow anything other than
Read-only. The Share Permissions and the NTFS Security are two different
things and you must set them both properly.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com