Shared folders on XP with password access

I posted some time ago but decided I was not ready to do this but now I am so here goes.

I have a peer to peer network with Win 98 and Win 95 machines. I have designated one Win 98 machine as a kind of "fileserver" where I have created shared folders with password access. All the other machines are in the same Workgroup and log onto the
network with no password and people can acess their files in the shared folders on the "fileserver" by entering their password. A system that has worked beautifully for some time now.

Along comes Win XP and I’m shot to pieces because it does things diferently. Win XP Pro machines cannot access the shared password protected folders on my Win 98 machine only shared folders with no password.

How can I set up password protected folders on a Win XP Pro machine (it would become my "fileserverâ€) that can be accessed by all the other machines (Win 95, 98 & XP) in the same or similar way I have now?

I hope this is possible and appreciate any help anyone can give me.

 

Hi Greg

You are correct XP does not use this mechanism (password protected folders) and therefore renders it useless.

The password protected folders are win98 only!

XP will do it even better (much more secure and controlable) but does require more knowledge and work to set up.

I will give you an overview then you can do the basic steps and I will then help you fine tune.

First is this XP Home or Pro! If XP Home it is somewhat neutered for networking but can be made to work.

Now!

XP will require non blank password on all the 98-95 machines. Additionally the XP machine has to have the usernames and passwords in its Users and Groups.

Each Computer name and Username must be unique but the password can be the same for all if you want.

So add the usernames you already have on the 98-95 machines to the XP users and give each 95-98 machine a password, then go to each 95-98 assign them this same password. Then log them on with this new password.

Other basics.

Confirm that all including the XP are in the exact same workgroup! That all 95-98 machines have Client for MS networks (and set this for Quick logon), that Client for MS networks is the primary network logon. While you are checking these I would add the Netbeui protocol to all (not XP yet) as you may need it.

Once you have everyone accessing the shares then it will be time to set the access security privileges. You go to a shared resource and rt click and tell it who you want to allow in and additionally what they are allowed to do.

Take it this far and get back! I will be in and out today but will check back often. just let me know when you stop for the day so I will know.

mike

 

Thanks heaps for this.
My network is at work so will try it all tomorrow (its 10.30 at night here in Oz) and get back to you tomorrow.

 

10-4 Greg

I just happen to be off from work tommorow but will be in and out!

Mike

 

I did it and I think I did it right.
Does this mean that a person will have to log onto the network with their name and password in order to get to their shared folder? Cause that's how its working.

It's a bit of a shame I can't have it the way it was with password protected folders. As I said it worked so well and everone was very happy with it.

My co-workers and I are teachers you see and we often need to access our stuff from more than one computer. We sometimes work in the classroom then we go off to the staffroom or the computer lab and it sure was more convenient the other way. We also have messenger systems and in some cases a faxing program that needs the computers to be logged on with the correct names in order to work. Not really a problem in the classrooms but it is in the staffroom and computer lab where everyone goes and needs access.
My network is divided into 2 workgroups. Does this XP way also mean that no computers on the other workgroup will be able to access the shared teacher files?
Thanks heaps for this help Mike

 

Good morning Greg

Yes they will have to log on. XP must be able to identifiy an authorized user and confirm this by password.

No user in this workgroup or other workgroup will be able to access these shares unless they are added to the users and groups of the XP. NOTE: make sure that as you set the user access and added the specific user to this share that you also removed the "Everyone" group. You should leave Administrators for access but that should only be you and maybe 1 or 2 help you with the system and that could or should have access to all.

UNLESS! an authorized user leaves a computer logged on under a validated user. They will need to log on as a validated user then off when they are finished. This is no problem at a users desk but could be at a more public workstation.

I see your problem as opposed to the old way.

There are at least 2 alternatives.

(A) move most of these shares back to a secure (non public) trusted win98 machine and go back to the passwords. In this case the XP will still be able to see these shares without a password. Maybe only leave the critical and more confidential stuff on the XP.

OR

(B) I have never used but I know there are programs (commercial, shareware and even free) that will password protect folders on both the XP and win98s. If you did this then it would be back to but even more secure than before. Because now you still have the XP security and the password.

How would this work. Well run the program, password protect these folders only, unshare all others. Give these folders "User access" in XP and allow only 1 user called say "Office" access to these folders. Then all win98 computers will "HAVE" to be logged on as "Office" and stay that way to get access.

So logged on as Office with the same password all the computers will be allowed access but then prompted for a password to actually get into the shares. Almost back to like you were with the exception that if someone hit ESC while booting (to skip logon) on a 98 computer or logged it on under a different name it would not have access at all.

Although this will work well I would hesitate on doing it unless you have or are the fulltime systems administrator. Because it is another level of complexity that has to be maintained. Also as the system grows you will get more 2K and Xp computers and maybe even a Server one day and this is the way it is normally done so maybe better train your users now and get them used to it!

If you decide that you would like to look into the Folder password thing then I will help you find the Freeware to do it. I can tell you that almost any (even freeware) program will have a stronger password and security than the win98. Additionally it will even require a password to access the folder even on the computer it is on, unlike the 98 password.

mike

 

Greg - since you say lots of the staff folks roam to multiple PCs and since it sounds like you are in a school environment, you might want to very seriously consider using a domain rather than workgroup(s).

It would require either NT4 or 2K server versions so not a no-cost thing but it might well be worth while for you. Easier to secure things but also to make them easier for users. For example, the domain controller validates logons so would allow proper access to everything when the user logged on at whichever machine.

Also fairly easy to set up user profiles and store some of the settings files on the server so the user would have an identical looking desktop (their own) where ever they logged one.

And good control would certainly be lots easier.

As an example - dealing with shared folders.

1. Set up "global" groups via the domain controller.
... admin which has full access to everything
... super-user which has read/write/modify access to everything
... users-1, users-2, users-3, and as many as you need.

2. When you set up shares, add Admin and super-user to each. Then simply a matter of adding the appropriate users to the group they belong in. New teacher hired - just add him/her to the group (one time thing) and the deed is done. And no password for anyone to crack to get access and you not know it.

3. Add the proper folks to users-1, 2, 3. Then give the group the access it needs to folders. If a user isn't a member of a group with access, he/she doesn't get in. At all. Period. Can't even list the contents of a folder unless a member of a group with that right.

And as an added bonus, you no longer have to add local user accounts to each XP PC you have or get. The domain validation works for them just fine. But gotta be XP-Pro since the home version cannot play in a domain setting.

 

Thanks for the advice Newt. I certainly have a lot to think about here

 

If you need more detail or have more questions, just post back with them.

One thought - Microsoft usually offers huge discounts to schools so you could probably get 2000 server for very little. And that's what you'd want since Advanced Server doesn't have any features that would be of benefit in your situation and the OS is a little larger and needs more resources to run.