Group Permissions & Shared Folder Permissions

[JustWakinUp]

This is a two part question.

1) How does one go about setting permissions for a newly created group within Windows XP?

2) I have a shared folder and I would like to set permissions on that shared folder. I know that I can right click on the folder and goto the security tab
and that is where the trouble starts...I don't have a
security tab on any of my shared folders. All my drives
are NTFS and I just need to find out how to get this
security tab so i can set permissions for that shared
resource...

Thanks guys.

 

[bcastner]

Explorer, Tools, Folder Options, View, scroll to one of the last entries: 'Use Simple File Sharing - Recommended' and uncheck the box.

This will provide the Security Tab for WinXP Pro on your NTFS volumes.

You set the permissions in Explorer by right-clicking the Folder and then the Security Tab.

 

[JustWakinUp]

Thanks Castner any idea on how to set permissions
on a group that you just created??

 

[bcastner]

You do not set permissions on the Group object.

For any Folder, Drive or File, your right-click, Properties, Security, and either use the simple security view at the top to add or remove users or groups, and individual permissions types, or click 'Advanced' where a larger number of security types are available.

The only thing (in a non-Domain setting) you can do to the Group object itself is add or remove usernames.

 

[JustWakinUp]

So that is to say that you can not create a group
assign permissions to that group? It sounds like
your stating that I have to use the default groups
that microsoft installed? I just want to be able to
create an engineering group and assign permissions
to that group of what I want to allow them to do.
Then assign users to that Engineering group.

 

[bcastner]

You mean policy objects, not permissions?

 

[JustWakinUp]

Well whatever the term is, I still need to do it.

 

[JustWakinUp]

I just want to be able to
create an engineering group and assign permissions
to that group of what I want to allow them to do.
Then assign users to that Engineering group.

 

[bcastner]

See if I am understanding you at all.

You want to create a new Group, Engineering.
You want to open Gpedit.msc and set policy for just the Group Engineering.
In addition, you want to in a single place set what Drive, Folders, Files and Shares the Group Engineering can access, and under what permissions.

You then want to use Lusrmngr.msc to assign users to this new Group.

This sounds perfectly reasonable to me. But it is not how the NT policy and security system works.

You edit existing or create new, policies. You add users and/or groups to these policy objects.

You set Drive, Folder and File security through the Security tab on each object, specifying the user/and or Group and the specific permissions.

You set Shared object permissions for users and/or Groups as a seperate process.

For an AD Domain setting there is a new console that consolidates much of this.

http://www.petri.co.il/download_gpmc.htm

For a Workgroup setting you might consider using my Tip of last week or so: thread779-685048