User share permissions on shared folders over workgroup 2

[Hueby]

Hi all, I'm use to dealing with SBS Server and AD, but I'm trying to help a group that does not have a Server.

Here is there layout:

They are networked on a WORKGROUP
15 XP Pro computers - most are single login users
1 XP Pro computer holds ALL the shared folers

The user's then access the shared folders to save files, but they want restrictions on which user can open certain shared folders and so on.

Simple file sharing was enabled.

Permissions are currently set for the EVERYONE group to Read/Write.

Question:
On a WORKGROUP setup, can I setup the shared folder permissions based on the USER (or even a GROUP?) from the other computer?

If so, how? ...or is my only option to recommend Server software?

I'm confused on how to setup this up over a WORKGROUP environment if it's possible.

Thanks, Matt

 

[BadBigBen]

first off all, SIMPLE FILE SHARING needs to be turned off, in that scenario...

then by right clicking the FOLDER or DRIVE, you can access the SECURITY tab or the SHARING tab, there you can enter users and their permissions...

How to Share and Set Permissions for Folders and Files Using Windows XP

http://technet.microsoft.com/en-us/library/bb456988.aspx

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[vacunita]

Yes Simple File sharing must be turned off.

The Machine holding the shares will need to have all the user's created on it that exists on the other machines. Then you can set a by user permission scheme.

----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

 

[Hueby]

Thanks for the replies. So after turning off simple files sharing, I will have to look up each user name on the computers and then add them to the "share computer's" user list.

What if more than one user name are just DEFAULT USER .... I'm assuming we are going to need unique names on the PC's.

 

[smah]

Yes, to set granular ACL's on the machine with the shared folders, you will need to duplicate all the remote user accounts on that local machine. Once the accounts are created, they can be combined into groups for easier managment. All ACL's are applied to the local (duplicate) accounts on that machine.

You can hide these [duplicate] users from the Welcome Screen of the shared folder machine

http://www.petri.co.il/hide_a_user_from_the_welcome_screen_in_windows_xp.htm

Also don't forget that there is a 10 concurrent connection limit:
thread581-1246416