Protecting Network Shares

As we have no networking subforum here I've had to put this problem here in Software. - sorry. Anyway I recently got my first Android (9) phone and was a bit shocked - putting it mildly - to see that by using Anonymous login I could access all my Windows network shares! This is basically because, in order to keep my network accessible whichever computer I happen to be using, I have given share permissions to Everyone, but in doing so I hadn't anticipated that this would also make all my file shares accessible to any Android user who might be able to guess or discover my network's wireless password to my router .

So I've been looking at what options Win 10 and/or my Virgin Media router could offer me in order to :

a) Protect my Windows network shares from being accessed by any device other than those I authorise and
b) Still allow my phone to access the internet using wifi

This seems like such a basic requirement but I haven't been able to find the combination of options to satisfy it. Perhaps it's me, but imo this ought to be simple. It isn't!

 

Use the same windows name / passwords on all PCs and you'll have access across them all. Lock "everybody" back out. What flavor of Win 10 are you running Home? Pro?
Pro you could use a domain..look it up https://www.turnkeylinux.org/domain-controller
centralize your shares and security

 

Wish I had known that when setting 'em up All systems are running 10 Pro, I'll have a good read. Thanks foogoo.