Simple File Sharing (all but one)

[view]

Hi all,
I have a p2p network with all comps working in Simple File Sharing mode.
Now, a need has emerged to turn off SFS on one of computers, and assign access permission for one of its folders only to certain workstations.
Can i expect problems with it.

Thanks

[johnwill]

It should work, you'll need accounts for the workstations you want to access the restricted folders so you can adjust the permissions for it.

[view]

I knew there will be some problems , and here they are.

I disabled SFS, went to Sharing tab, then Permissions, and tried to Add network users (computers).
The problem is, there is no other (network) computers but the local one in 'Locations', so i can't add network users (i get "lancomputer\user is not from a domain listed in the Select Location dialog box, and is therefore not valid.").
The same i get on 'Security' tab, when i try to add a network user.

I tried this on 2 different networks and got the same result, so i probably make some systematic mistake.

p.s.
all comps are running xp pro sp2, and the network is p2p.

[johnwill]

Just add a normal user in the control panel. That's a "Network User" in a workgroup LAN.

[view]

Originally Posted by johnwill

Just add a normal user in the control panel. That's a "Network User" in a workgroup LAN.

Hmm, is that means i should add a normal (limited) user account with the same username and password as on a network computer which i want to assign access rights to?
Piece of cake (simple like beans), but what if i want (theoretically) to assign permissions for all rest of the computers. I'd have a whole bunch of user accounts on my machine (?)

Anyway, i'll try this tomorrow.

Thanks

[view]

And now something very confusing from this site:

... There is no way in a workgroup environment to restrict certain folders to a particular user. However, you can hide a shared folder by placing a dollar sign immediately after the share name. You can then give only authorized users instructions for locating it.

Then what all this users & permissions stuff for ??

[johnwill]

That site is full of it. If you don't allow anonymous access, and don't enable simple sharing, the permissions for each login account work fine.

[view]

Could i get some advice (before i try to do it) please?

I have a shared folder on the mentioned computer, which all network users should access normally (without restrictions), except one of its subfolders, which should be accessed only by certain net comp.

If i assign permission 'Everyone' to that 'main' folder, will that override the restriction on mentioned subfolder, to which i'd set permission (for ex.) netcomp5\userX 'allow full' (without 'Everyone'), or it would work fine.

Or, should i simply pull out that subfolder from the main one, and then assign permission for it (less desirable, but if i have to ..)?

Thanks

[johnwill]

Try the first way changing the permissions on the sub-folder. If it doesn't restrict access, separate it.

The easy way to test a lot of this stuff is simply create test folders and try it.

[view]

It works like a watch.

The solution is turning off inheritance from parent folder (in 'Advanced' part), and then assigning permissions for the sub-folder.

I'd have one more question.
Is there a way that system still prompts for password if a network user (to whom i've already assigned permission) tries to access the share?
I heard that WinXP doesn't support password protection, but yet maybe there is some workaround for that?

Many thanks once again

[johnwill]

If you've already given him access rights to the folder, he won't get a password prompt. If you want that to happen, you need to leave him off the permissions list. You could have a different account that is used to access those, it would have to have a unique name. This account would be on the "server" side.

[view]

Hm, seems it doesn't work.

I did the following:

I've created a new limited account (on the 'server') with the username 'test' and pass '12345'.

Disabled SFS, then created a new folder named 'test100' in Docs&Settings directory.

On sharing tab (strange thing, it /my bro's computer/ doesn't contain 'Security' tab) of this folder, i've added a new user named 'test' (which has been recognized by the system) and set permission 'Alow full' for it.

Then i've removed 'Everyone', so the only user in the field is 'test/onbroscomp'.

Well, when i tried to access that share from other computer (as you suggested, i didn't create an account with its username/pass on the server), it is simply rejected (with some text like 'you don't have access rights' or so) without any user/pass prompt.

So, the things become interesting here.

[johnwill]

XP-Home doesn't have the security tab, and so will be problematic to control access to individual folders.

[view]

Yes, but it is Professional.

However, today i've tried the same on the network at work (all xp's), and have got the same result.