How do I add a network user to the security permissions on a sharedXP folder?

I have a shared drive on my family home network. I want to set the
permissions so that only my desktop PC and my laptop will have access
to my personal folder on the shared drive but I'm having trouble
adding network users to the security tab in XP. I can only see local
users & groups in the tab.

Can anyone shed some light?
Thanks
Ciarán


Cron

In news:6191f112-d9f3-495b-b6af-(E-Mail Removed),
Cron <(E-Mail Removed)> typed:
> I have a shared drive on my family home network. I want to set the
> permissions so that only my desktop PC and my laptop will have access
> to my personal folder on the shared drive but I'm having trouble
> adding network users to the security tab in XP. I can only see local
> users & groups in the tab.
>
> Can anyone shed some light?
> Thanks
> Ciarán

"Network users"? What exactly do you mean by adding "network users?" From a
domain?

Do you have an AD domain running at home? If so, is your XP workstation
joined to the domain? If it is, you can view users from the domain. If it is
not joined, the only option you have is to add local users. You'll have to
come up with a username and password for each user you want to allow to
connect and add them.


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations

Thanks for the reply Ace. Sorry I should have been more specific. I
have a simple WORKGROUP based setup where all computers on my family
workgroup have access to the same shared resources on one 'server'
computer. I'd like to give each member of my family exclusive rights
to their server folder from their own laptop and/or desktop. Is this
possible?

Thanks,
Ciarán

In news:81b351f9-0de0-4ee0-9c7d-(E-Mail Removed),
Cron <(E-Mail Removed)> typed:
> Thanks for the reply Ace. Sorry I should have been more specific. I
> have a simple WORKGROUP based setup where all computers on my family
> workgroup have access to the same shared resources on one 'server'
> computer. I'd like to give each member of my family exclusive rights
> to their server folder from their own laptop and/or desktop. Is this
> possible?
>
> Thanks,
> Ciarán

I see. In a workgroup, on the machine you are designating as your central
'server' (whether it is a stand alone (not joined) or a workstation, you
will need to create an identical name and password for each of your family
members that they logon with on their own machines. There is no 'adding'
them from the 'network' rather adding the users you created on your own
machine into the shared folder on their own machine. In each of their
machines and yours, you will need to either disable the firewall or make
rules to allow your workstation's IP address as trusted. Then you may also
need to change your workstation to classic file sharing, if you haven't done
so already.

That's the way workgroups work. Each machine is it's own world and trusts
nothing else and you can't create a trust between stand alones. As long as
you have identical credentials, you can make it work.

Ace

On Feb 17, 3:35 am, "Ace Fekay [MVP]" <PleaseAs...@SomeDomain.com>
wrote:
> Innews:81b351f9-0de0-4ee0-9c7d-(E-Mail Removed),
> Cron <cronok...@hotmail.com> typed:
>
> > Thanks for the reply Ace. Sorry I should have been more specific. I
> > have a simple WORKGROUP based setup where all computers on my family
> > workgroup have access to the same shared resources on one 'server'
> > computer. I'd like to give each member of my family exclusive rights
> > to their server folder from their own laptop and/or desktop. Is this
> > possible?
>
> > Thanks,
> > Ciarán
>
> I see. In a workgroup, on the machine you are designating as your central
> 'server' (whether it is a stand alone (not joined) or a workstation, you
> will need to create an identical name and password for each of your family
> members that they logon with on their own machines. There is no 'adding'
> them from the 'network' rather adding the users you created on your own
> machine into the shared folder on their own machine. In each of their
> machines and yours, you will need to either disable the firewall or make
> rules to allow your workstation's IP address as trusted. Then you may also
> need to change your workstation to classic file sharing, if you haven't done
> so already.
>
> That's the way workgroups work. Each machine is it's own world and trusts
> nothing else and you can't create a trust between stand alones. As long as
> you have identical credentials, you can make it work.
>
> Ace


Great that sounds promising - Thanks Ace. I'm trying it out here but I
can't figure out what way to setup the permissions. I've added a local
user account on the fileserver computer with the same name as my own
workstation. i don't use a password so I left it blank. Then I added
the NETWORK group to the permissions on the whole shared drive and
allowed them to list folder contents only. Next I allowed the NETWORK
group full access to all folders except my own (just as a test) and
gave the new user account under my name full access to my folder on
the shared drive. I thought that these actions would allow everyone
full access to all folders but only list access to mine. Am I doing
something wrong?

It's important to note that before trying all this, everyone in my
family had full working access to the shared drive from any
workstation on the network.

Thanks again for the help Ace, I really appreciate your time!
Ciarán

In news:d91eb810-c0d1-4d37-8b40-(E-Mail Removed),
Cron <(E-Mail Removed)> typed:
>
> Great that sounds promising - Thanks Ace. I'm trying it out here but I
> can't figure out what way to setup the permissions. I've added a local
> user account on the fileserver computer with the same name as my own
> workstation. i don't use a password so I left it blank. Then I added
> the NETWORK group to the permissions on the whole shared drive and
> allowed them to list folder contents only. Next I allowed the NETWORK
> group full access to all folders except my own (just as a test) and
> gave the new user account under my name full access to my folder on
> the shared drive. I thought that these actions would allow everyone
> full access to all folders but only list access to mine. Am I doing
> something wrong?
>
> It's important to note that before trying all this, everyone in my
> family had full working access to the shared drive from any
> workstation on the network.
>
> Thanks again for the help Ace, I really appreciate your time!
> Ciarán

Blank passwords, if I remember, don't work. If you have everyone accessing
it previously, then why change it?

Here's the simple way to make it work:

Share Tab:
Share the folder
Permissions are:
Administrators: FC
Authenticated Users: Change

Security Tab:
Administrators (MachineName\Administrators): FC
Creator Owner: Special (leave default if already in there. If not, don't put
it in)
System: FC
Users (ComputerName\Users): R&E, List, R, Special - Leave as default

That's all you really need. When they connect in, they will be authenticated
by the mere fact they are logged on to their machines with identical
credentials.You really don't need the Network group. That is a special group
that anyone is a part of during network operations. Usually apps, such as a
web app or others, will use that. No need in your case. I have a mixed setup
at home. I have a domain as well as workgroups such as for my family that is
not part of the domain because it's for business only. But I access their
machines when I need to by the mere fact on each of their machines, I
created an account with my current username and password.

I think you may be making this more difficult than you need to, but then
again, I'm not sure.

Ace

On Feb 17, 8:21 pm, "Ace Fekay [MVP]" <PleaseAs...@SomeDomain.com>
wrote:
> Innews:d91eb810-c0d1-4d37-8b40-(E-Mail Removed),
> Cron <cronok...@hotmail.com> typed:
>
>
>
>
>
>
>
>
>
> > Great that sounds promising - Thanks Ace. I'm trying it out here but I
> > can't figure out what way to setup the permissions. I've added a local
> > user account on the fileserver computer with the same name as my own
> > workstation. i don't use a password so I left it blank. Then I added
> > the NETWORK group to the permissions on the whole shared drive and
> > allowed them to list folder contents only. Next I allowed the NETWORK
> > group full access to all folders except my own (just as a test) and
> > gave the new user account under my name full access to my folder on
> > the shared drive. I thought that these actions would allow everyone
> > full access to all folders but only list access to mine. Am I doing
> > something wrong?
>
> > It's important to note that before trying all this, everyone in my
> > family had full working access to the shared drive from any
> > workstation on the network.
>
> > Thanks again for the help Ace, I really appreciate your time!
> > Ciarán
>
> Blank passwords, if I remember, don't work. If you have everyone accessing
> it previously, then why change it?
>
> Here's the simple way to make it work:
>
> Share Tab:
> Share the folder
> Permissions are:
> Administrators: FC
> Authenticated Users: Change
>
> Security Tab:
> Administrators (MachineName\Administrators): FC
> Creator Owner: Special (leave default if already in there. If not, don't put
> it in)
> System: FC
> Users (ComputerName\Users): R&E, List, R, Special - Leave as default
>
> That's all you really need. When they connect in, they will be authenticated
> by the mere fact they are logged on to their machines with identical
> credentials.You really don't need the Network group. That is a special group
> that anyone is a part of during network operations. Usually apps, such as a
> web app or others, will use that. No need in your case. I have a mixed setup
> at home. I have a domain as well as workgroups such as for my family that is
> not part of the domain because it's for business only. But I access their
> machines when I need to by the mere fact on each of their machines, I
> created an account with my current username and password.
>
> I think you may be making this more difficult than you need to, but then
> again, I'm not sure.
>
> Ace

Thanks again for the reply Ace. At the moment everyone has access to
everything on the shared drive. All I really want to do is prevent
other users from easily accessing/accidentally deleting or overwriting
my files. Maybe there's an easier way to do this! Anyway I'll play
around with the settings you mentioned and see if I have any success.
Cheers,
Ciarán

In news:4a628a61-92a3-4c5e-8fde-(E-Mail Removed),
Cron <(E-Mail Removed)> typed:

> Thanks again for the reply Ace. At the moment everyone has access to
> everything on the shared drive. All I really want to do is prevent
> other users from easily accessing/accidentally deleting or overwriting
> my files. Maybe there's an easier way to do this! Anyway I'll play
> around with the settings you mentioned and see if I have any success.
> Cheers,
> Ciarán

I see. It's rather simple then. If everyone has access, then I would remove
the Everyone group, and replace it with Authenticated Users with
Read/Execute and List only. Or you can complety remove Everyone and replace
it with only the users names one by one that you want to allow access and
their access permissions.

Ace

On Feb 18, 4:40 am, "Ace Fekay [MVP]" <PleaseAs...@SomeDomain.com>
wrote:
> Innews:4a628a61-92a3-4c5e-8fde-(E-Mail Removed),
> Cron <cronok...@hotmail.com> typed:
>
> > Thanks again for the reply Ace. At the moment everyone has access to
> > everything on the shared drive. All I really want to do is prevent
> > other users from easily accessing/accidentally deleting or overwriting
> > my files. Maybe there's an easier way to do this! Anyway I'll play
> > around with the settings you mentioned and see if I have any success.
> > Cheers,
> > Ciarán
>
> I see. It's rather simple then. If everyone has access, then I would remove
> the Everyone group, and replace it with Authenticated Users with
> Read/Execute and List only. Or you can complety remove Everyone and replace
> it with only the users names one by one that you want to allow access and
> their access permissions.
>
> Ace



Hi Ace,
After a bit of messing around I eventually got this working. I ended
up just denying the GUEST group on the protected folders and allowing
my own username and it worked fine. Just wanted to say thanks for all
your help!
Ciarán

In news:838f05f7-46eb-4e39-a611-(E-Mail Removed),
Cron <(E-Mail Removed)> typed:

> Hi Ace,
> After a bit of messing around I eventually got this working. I ended
> up just denying the GUEST group on the protected folders and allowing
> my own username and it worked fine. Just wanted to say thanks for all
> your help!
> Ciarán

You are welcome and good to hear you figured it out!

Ace