Adding permision to workgroup computers (file sharing)

Ok,
Just wanted to do my home network w/ some extra security to allow sharing of the file w. only 2 PCs and no one else no matter what and whos on the wire. But as I found out I cant select users from my connected PC like I would do in the domain. Basicaly what I have in Locations tab in advanced user selection dialog is only my local PC name.

So the question is this: How I can select the location as another PC, so I can select user on anoteh PC to access network share... ex: Desctop\Alex; Laptop\Alex

Thanks!

 

You cannot.

Imagine now how frustrated Admins in large Workgroups become.

In direct answer to your question:

• Make all file-sharing enabled users of Computer A new users with the same usernames with passwords of Computer B;
• Make all file-sharing enabled users of Computer B new users with the same userrnames with passwords of Computer A;
• If you do not like passwords, use Autologon. It is very highly recommended that you implement passwords under Windows networking. To Autlogon: Start, Run, control userpasswords2. Uncheck the box at the top that states 'User must enter a username and password....' and click Apply. You will be prompted for the Autlogon username and password. Supply these and click OK.

 

a) It seams that i dont have userpasswords2 (I'm Running Tablet PC 2006) so I guess will have to mess with regedit as deccribed om msdn: http://support.microsoft.com/kb/315231
Or maube my VS blocks the feature.

b) It seams so stupid not to allow us to brows the network and to select the user on remote PC. I think there should be a way to do this w/o having same user loged in on both PCs

 

The same user does not have to be logged in on both machines.
It just has to be a defined user on both machines.

This is essentially the NT security model for Workgroups. If you want:

On both machines:

• Control Panel, Folder Options, View. Near the bottom checkmark to Enable 'Use simple file sharing - (Recommended)'
• Start, Run, and type: net user Guest /Active:Yes
• Reboot.

You now have changed the XP security model so that anonymous Guest-priviliged access is permitted to shared resources. You do not need to synchronize usernames and passwords.

 

"user does not have to be logged in" are u saying that if i have user a present on both machines and then user b lohged in then user b can access another machine even though his not autorized?

Enabling and eding guest account to access list mesna same as allowing network users to access the shae aka everu one from the network can view the file = Not too smart to do.

 

If you look, I did not enable the Guest account. You need to do so through Control Panel, User Accounts.

What I enabled was Group Guest so that an anonymous remote logon was enabled. You can still use NTFS permissions to control what Guest is permitted to do with any Folder and any file. And no rights are granted to another user Profile contents, whether local or remote. http://support.microsoft.com/default.aspx?scid=kb;en-us;304040

The security of any LAN workstation logon is ensured with usernames and passwords; its just that in accessing remote shares these credentials will be assumed.

With Simple File Sharing disabled, you need to create on each Workstation the username and passsword combinations that will be permitted access to any share.

So if I as Alexus is logged in at workstation A, and I attempt to use a shared resource on workstation B, I better have my username and password previously defined on that workstation in order to be allowed access. You are logged in at workstation A, and your username and password are the tokens that you need to pre-create on workstation B to use shared resources. This has nothing to do with logging in at both workstations.

Remember too that if you use the NTFS filestore, there are two levels of permissions to be dealth with:

The 'Share-level' permissions set by the user creating the Shared resource;
NTFS permissions on folders and files.

Each of these need to be used judiciously so that they work in harmony and not at cross-purposes.