file server setting, please help ...........

[bonebone]

I try to use win 2000 pro to setup a file server for 4-5 computers. what i want to do is a folder called "files" which can map to each computers. Inside the "files", each computer have there own folder and can be read by the others but not modify except by the owner.
I have set the network in a workgroup (without domain) and add the users into the server as a group called "somegroup". how should i set the permission and security.

i have try to add the somegroup (remove the everyone) in the permission with full conrtol and set the security to each users with the ability of read or write. the result is i get an error message access violation ......
although i have no problem to read or write to those folders if i set to everyone in the permission, that is not what i want since each of us can modify the others work.

if anyone know how to work this out, please help. thank you

[bonebone]

Is there anyone know how ?? or I didn't explain the situation clearly .......

please help, thanks

[jimscreechy]

hmm you cannot do it the way you want because you will have to creat 4 separate groups, each one having a write permssion for a different user while the other users are set to read. you will also have to add each group to each folder. Very cumbersome and a bit of a waste of time for this setup. Forget the groups and stick to user accounts in this isntance, it will be far easier to manage. Create the resource/folder on the server/workstation. Set the file permsisions to everyone. Share it - and i suggest you leave the share permissions default that is everyone read/write. Then create the seperate folders for each user in this share. Then add each user with the permissions you want for that user to the folder. remove the allow inheritable permissions from parent to propagate to this object from each new folder.

That should be it.

I don't think I have forgotten anything.

[bonebone]

thanks for the reply

as you mentioned, i think my way to do it is not practical. i properly may add a few more computers to the network but under the 10 users limit.

i try to do what you told me, now i have questions. under the main share folder, do i need to share each user folders ? do i need to set anything under the security tag (HD is ntfs). also, if i add the user to the "user folder", do i need to remove "everyone". i ask this becuase it has a error message (unable to access from that user's computer ) if that user is the only one in the permission after the "everyone" is removed. if i add the everyone there, the permission didn't seem to work. the user have all access even i deny all.

ray

[jimscreechy]

Ok no problem,

1.) Under the main share folder, do i need to share each user folders ?
No just attach to the main share. Each PC attached to this share will see the 4 folders inside, but the access they have will depend on the user rights you have assigned.

2.) Do I need to set anything under the security tag?
Yes you most certainly do. This is where you will add each user, and assign each particular user their access rights. Example, you could add Jimscreechy (or more likely computername\jimscreechy) and tick the boxes for read access, if you only want read access for my account. Then you would add bonebone (again from the relevant computer account ie computername\bonebone) and give read modify and write permissions if that is what you need.

3,) do I remove everyone.
Yes you do, if you don’t then the permissions everyone will effectively allow full access with the default settings. Or you could give just read access to everyone, then add the user with the write permissions to and not bother with any other individual accounts. - If you don’t know what I mean then just get rid of everyone. But make sure that the administrator for this server has full access to all folders and files you are modifying.

4,) unable to access from ‘computer x’ if everyone is removed.
This is because you have not correctly added the account from ‘computer x’ are you sure you have added this account using the notation computerx\bonebone? And not used the local account ‘bonebone’ on the same server you are sharing the files from? This is probably the issue.

[bonebone]

after i read yours reply, i think i may do something wrong at the user account.
the user computer has an account "computerx\bonebone" and the server has a same account name "server\bonebone" so they can share files between each other. when i add the user in the security or permission, the path is "server\bonebone". i try to change it to "computerx\bonebone" as you mentioned in no.2 and no.4. it give me an error message :

the object "computerx\bonebone" is not valid because only objects from domains that appear in the "look in" box are allowed

do you know why ?? all the computers are under a workgroup and not in domain. the server computer is using win 2000 pro.

thanks

ray

[jimscreechy]

It sounds like you are not able to see the object/computer so it is giving you an invalid object response. Can you see this computer in you workgroup?

[bonebone]

yes, i can
in fact, i add an user account in the server computer with the same name and password as the user computer. i share the files between them without any problem. But i want to add more security option in it, that's why i start this thread
i just cannot add the user in the permission which is not in the server computer

thanks again for your help, if anyone know about this , please help .........

ray

[jimscreechy]

yes you have shared files but because you had everyone added to file permissions you were not using the spcific accounts

[bonebone]

as i have tried and still cannot find out why i cannot add the computerx\user in the server, do you think that i have to setup in domain ( now in workgroup ) in order to do the way you mentioned ?

if so, is it hard to set that up ? as i have never done that before.

thanks again

ray

[jimscreechy]

Ok Ray you have done everything correct so far but if you cannot see the accounts to add I am stumped! Just to make certain make sure, in your loacal area settings, make sure client for microsoft networks, file and print services for Microsoft netowrks, and netbios over tcpip are all enabled.

When attempting to add the account computerx\userx are you browsing to the locate or are you typing this name in?

[bonebone]

yes, i have checked the local area setting and those component are all there. as i can share file between those computers before i set any permission, i don't think the problem is there.

i cannot see and select the account outside my server computer in the permission menu, so i have to type that in as you said. i wonder why this is happening since i can see other computers in network neighbourhood.

i guess i cannot work in this way in workgroup ? only can get it done in domain ? if i set all the computers in a domain, i properly can see the computer in the list and add them as you tell me

anyway, thanks again for helping me and sorry for the trouble ....

ray