Hide and Protect Folders/Data While Giving Applications Full Acccess

Welcome to WindowsBBS

That generally means they Only need access to the Folder where the live data lives and not the entire hard drive.

 

Also, if concerned about security then don't use simple file sharing. Set up user accounts on the "xp server" by adding users via Computer Management (rt click My Comp > Properties).

Added usernames/passwords should match the user logins on the other xp computers.

Put the shared data folder on the hard drive root directory (c:\, d:\, etc. of the xp server) by itself, not inside another folder. Rt click that folder > sharing tab > enable sharing > new share button > name the share > permissions button > add button > add objects (objects = users you just added).

Disable simple file sharing on other computers. Logoff and logon each. Remove the existing mapped drives on other comps & recreate them.

Turning OFF simple file sharing adds the security tab to folder properties and further restrictions can be set there.

XP server should have a static ip address and mapped drives won't get lost.

 

Why do you have a mapped drive?

In theory - if you give users full access to the data folder then yes they can use the accounting software. And without out a mapped drive they don't/shouldn't have direct access to the data via Win Explorer.

 

Remove the mapping on one pc - reboot the pc and test the software

 

Yes, temporarily, until you re-setup everything.

If none of the comps have WWW access then simple file sharing could be sufficient. If any of them do have WWW access, including the xp server, then simple file sharing is not secure enough, esp for financial data.

In a business, no comps that access financial software and its database should ever be connected to the Internet.

 

Nope. I do tech support for an Accounting Software Company Out software requires Full Read/Write Access to the live data but doesn't need to have mapped drives.

 

If you setup the new users on the xp server as NOT part of the administrator group and set the share to read-write then those users should be able to access the data via the accounting software but they should not have ability to delete the files as they don't own them.

You can use the advanced button in the shares setup to control exactly what these users (objects) can do.

 

1. There's no guarantee ever about changes/theft/deleting.

2. Simple File Sharing is inherently less secure.

3. Disabling Simple File Sharing enables the Security Tab in Folder and File Properties windows. Advanced security can then be implemented.

4. NO computer, I repeat, NO computer on a local network that accesses financial databases and/or critical financial information should have access to the Internet, period. They become prone to malware or virus infections that can compromise the security of finances.

5. User logons on computers other than the server should be Limited Uszer Accounts with security restrictions in place.

6. The amount of security needed is proportional to how critical your financial data is. (your opinion)

7. Concern about data loss is diminished by using regular backup systems, either manually or automatic. Off site if necessary.

That said, what I've suggested so far in this discussion WILL make your network more secure and WILL reduce risk of loss/theft/deletion provided you correctly setup everything. Mapped drives too.