How to allow a user from one group access another group

[keysol]

Hi,

We've installed a small peer to peer lan at work. All of the computers (5) are using XP Pro. Four of these computers are part of one group and have no difficulty accessing files among each other within their group to the extent of their access rights. The fith computer is on the same physical lan but part of a different group. We would like that fith computer to have access to a limited number of sub-directories on some of the computers from the other group. The reason we've created a second group is that we expect additional users to be added to the second group and by creating a second group for them we will have better control in terms of security.

Is what I'm trying to do possible?
If so, how do I go about it?
Finally, is there a better way of going about segregating groups of users?

Gerr

 

[wolluf]

Do you mean fifth computer is member of a different workgroup? If so, I'd make it member of same workgroup.

Are you confusing groups of machines and groups of users?

Are you using simplified sharing? If you disable this, you can use XP security on sharing, by setting up all user accounts on all machines. If you haven't too many users, this is not too onerous with just 5 machines (but would get more so if you increase size of network - might need to look at 2k or 2k3 server in that case). You can segregrate the users into user groups (again, set up the same groups on each machine) & give the groups access to appropriate resources on each machine.

 

[keysol]

Do you mean fifth computer is member of a different workgroup?
Yes two groups. WORKGROUPA & WORKGROUPB

Can you have one user account configured to be a member of WORKGROUPA & WORKGROUPB at the same time?

 

[wolluf]

Users do not belong to workgroups - machines do.

If all you users may need access to all your machines, the easiest thing to do is make all machines members of same workgroup (they can only belong to one - though I think machines in one workgroup may be able to access machines in the other if on same physical lan and using same IP address range).

Then use 'User Groups' (run lusrmgr.msc to access control of these) - ie, set one up for each group of users (as mentioned above - set up all users on all machines, and siable simplified sharing). You can then set up shares as required on each machine, and give access to the relevant group(s).

I apologise if I'm getting overcomplicated for your needs - this just seems reasonable approach to your question to me.