XP Professional File Sharing

I have a small home network of around 5 computers, with one computer in particular that holds files we all regularly use, but also work folders that I want to limit access to (preferably with a password, or at least limited to certain other computers on the network). I have turned off 'simple file sharing' on that computer, which runs Windows XP Professional, while the rest run XP home, and various versions of Vista. All computers are members of the workgroup called 'WORKGROUP'.

It feels that the right way to go about this is to right click the folder I want to limit network access to, select 'Sharing and Security...', 'Permissions', 'Add...', 'Locations...', I then expect to see my workgroup and to be able to choose a user/group from a list of computers. However it only shows the local computer. I figured there must be a network security setting that restricts the list, so I've looked through 'Control Panel', 'Administrative Tools', 'Local Security Policy' to see if I can fix this. While I haven't had any success, I have found several similar windows in the 'User Rights Assignment' which I can navigate to 'Locations...' and I then DO see the other computers in the workgroup.

All this is reassuring that I can ultimately create a user profile for a network computer (or reference to an existing one), but I just can't figure out how! What am I doing wrong?

 

Hey 94dgrif,

Complete these steps on the XP Pro Machine.

1. Go to User Accounts and create a new Limited user named Public_files and set a password.
2. Create a new Limited 2nd user account named Work_files and set a password.
3. Open My Computer and navigate to the root of the c:\ drive.
4. Create a new folder named Public.
5. Move all of the files that everyone should have access to into the new Public Folder.
6. Right click on the new Public folder and select Sharing and Security.
7. Within the Sharing tab, change the option to share the folder.
8. Click the Permissions button and add the new user account Public_files and the built-in Administrators group. Remove the Everyone group and then Ok out.
9. Next, within the C:\ drive create a new folder named Work. Move all of the work folders into this new folder.
10. Right click on the new Work folder and select Sharing and Security.
11. Within the Sharing tab, change the option to share the folder.
12. Click the Permissions button and add the new user account Work_files and the built-in Administrators group. Remove the Everyone group and then Ok out.
13. Reboot the XP Pro Machine.


1. After the XP machine is up and running again, reboot the 4 remaining machines.
2. Next, on the 4 machines, login to the applicable user accounts and then browse to the new Public share. Login to the share using the new user account name of Public_files and the associated password. (Checkmark the option to remember the password, if desired).
3. On the 4 machines, login to the applicable user accounts and then browse to the new Work share. Login to the share using the new user account name of Work_files and the associated password. (Checkmark the option to remember the password, if desired).

Techsent

 

Thanks a lot for the reply Techsent.

Am I expected to have a username/password prompt when I try to open the Work folder on the 4 other machines, or did you mean for me to create a user account called 'Work_files' on all 4 computers and to first log on to that user account? Currently if I try to access the folder from one of the 4 machines using whatever username they normally use I receive this message in Vista:

Alternatively if I create a user account on the 4 computers and call it 'Work_files' then I can indeed access the shared network folder. I'd really much prefer a username/password prompt as it would allow me to access protected folders from visiting networked computers when helping friends and family.

If the latter solution is the best I can hope for, then I have found a slight improvement to make login screens more kempt. I can create Users on the XP Pro computer with the same name as the users on each of the 4 other computers, and then assign their permissions as I see fit. I can then go to each user in 'Administrative Tools' -> 'Computer Management' -> 'Local Users and Groups' and remove 'Users' from their 'Member of' list. Doing so effectively hides them from appearing on the logon screen, but still provides all the permissions benefits.

I've also created a poor replacement for the password prompt by creating the following batch file on my laptop:
net use * /del /yes
net use \\XPProComp /USER:Work_files test
(where 'test' is the password)

That way I can quickly and painlesly get to my work folders when using my laptop, type out the command if I need access to those folders from other computers, but still give basic access to the default computers on th enetwork.

 

Am I expected to have a username/password prompt when I try to open the Work folder on the 4 other machines

Yes. But since the message appeared, go to My Computer/Tools on the menu and choose Map Network Drive... instead. Browse to the desired share and complete the login process. Do this step for the other share too.

Nice solution by using the batch file.

Techsent

 

I think I'm not getting the prompts because I'm using Vista Home versions? If not, then I haven't been able to find a way to activate them.

My network basically works as follows now. I have my passworded user account on my desktop and laptop that I have full control of each shared folder, my wife has full control of several folders (pictures, collective work folders etc) and read access to the rest, and everyone has read access to the regular public folders (pictures, movies, music etc) but no access to the protected locations and no full control access to anything. That allows me to make changes to those folders from my desktop and laptop and to access my work things, my wife can drop pictures into the picture folder, and anyone visiting can access things like shared movies without any means to infect the network if their computer has a port-sniffing virus.

If anyone else wants to setup their network in a similar way to me, I'll explain below how I finally have mine setup. The steps are easier with versions of Windows above Home (ie XP Professional, Vista Business etc), but I've included the steps for Home versions too.

1. Basic Settings
In a Windows Explorer window (hold down the Start key and then tap E) click on Tools (If you can't find Tools, tap Alt once to make it appear), Folder Options..., View, and make sure Use simple file sharing is deselected. For Windows Vista and 7 you must also go to Control Panel -> Network and Sharing Center and turn on Password Protected Sharing.

2. Blank Passwords (Optional)
If your network has users that don't use a password on their computer but you still want them to access your shares then you will need to change a setting. Be warned that if you disable passworded sharing and grant special access to a user without a password in a later step, then a computer savvy network user will potentially be able to sign in as that other user.

Windows Home:
Run regedit (hold Start key and tap R), navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa and set limitblankpassworduse to 0.

All other versions of Windows:
Go to Control Panel -> Administrative Tools -> Local Security Policy and disable Accounts: Limit local account use of blank passwords to console logon only.

3. Create Users
Windows Home:
Go to Control Panel -> User Accounts and create a user with the exact name of the other users on computers on the network that you want to give special permissions to.

All other versions of Windows:
Go to Control Panel -> Administrative Tools -> Computer Management -> Local Users and Groups -> Users and create a user with the exact name of the other users on computers on the network that you want to give special permissions to.

4. Hide Users From Welcome Screen
Windows Home:
Open regedit and create the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList and create a 32-bit DWORD value with the exact name of the user (this stops them from appearing on the login/welcome screen).

All other versions of Windows:
Under Properties for each user you create, click the Member Of tab and remove the User entry (this stops them from appearing on the login/welcome screen).

5. Shares For Everyone
Find a folder you want to share, right click it, and find the Sharing settings (Sharing and Security, or Sharing, or whatever your version of Windows uses). For folders you want everyone to have access to, use the Permissions options of Sharing to include Everyone, and also make sure Everyone is listed in Security too.

6. Shares With Limited Access
For folders you want to limit access to make sure Everyone is not listed on the Sharing or Security tabs, and instead Add the users you do want access to, along with whether you want only Read access, or Full Control. Remember to include the user on the Security tab as well as the Sharing tab.

7. Repeat For All Computers
All the above steps control how other computers on the network access the files on this computer. If you would like to access other computers in the same way then you will need to repeat the steps for all the other computers. Once completed reboot all the computers on the network and you should be set!

 

Im not sure why you're not getting the login prompts. Glad you got it sorted though.

Techsent