How do you add certain computers on a small network to access your shared folder/PC?

[zByte]

Hello,

My question: Scenario- 6 computers in a small office network.
On one computer I have 1 shared folder. Every pc on network can access it.
How can I set it up where I can designate which computers can have access to the computer with the shared folder?

I disable simple sharing, and using ACL. I can set security here. I'm having a lil tough time remembering how to setup where network users can log in either by username/password, or the system knowing which computers can log on.

Besides setting security on a folder share, is there also another way to set something up on the main computer with share, where it can remember which computers are allowed access into it and which ones are not? (either by computer names?)

Anyone with knowledge to both questions please post

zByte

 

[RebateMonger]

This is one reason why people install servers (like Windows Server 2003 or Windows Small Business Server 2003) in their office. It automatically manages sharing and permissions for all users, and access rights can be set by groups, instead of by individuals.

Assuming you are using Windows XP Professional, the standard method is to limit folder access by Users. You definitely need to turn "Simple File Sharing" OFF on the "Server". You set up accounts for every person in the office on your XP Professional "Server". Then you set the Security permissions, giving access to each folder to the Users who should have access. It's easier if you just set the "Sharing" rights to "Everyone, Full Control", and use the "Security" rights for actually controlling access.

All User accounts will need to have passwords associated with them, or they won't be able to access the shares across the network.

XP has a connection limit of ten computers, so if you expand more, you'll probably want to get a server.

 

[zByte]

Yeah, thanks for the info.

I setup XP server 2003 in situations and access setup is more robust and simple.

I was wondering if XP pro had similar ways. So basically the only way is setting up share rights to users on folder properties. Theres no way to setup a policy on a xp pro machine to allow specific computers access to it?

I know if the computers was setup in a domain environment, it can be done.

Thanks for your input

 

[RebateMonger]

I guess you could set up various firewall policies (create an IPSec Security Policy, for instance), that will block packets from designated IP addresses. This means you'd have to use Static IP addresses on all PCs, and hope that nobody changes the addresses. Or, with the right firewall, you could block by MAC address. You could probably do it using Certificates, too, allowing positive identification of the PC and eliminating the possibility of IP address spoofing.

Even Server 2003 can't really directly restrict access to file shares by Computer alone. You can restrict a given Computer's SYSTEM access to your files, but you can't allow or disallow file share access based on the requesting COMPUTER. Only by User or Group.

 

[ktwebb]

time remembering how to setup where network users can log in either by username/password, or the system knowing which computers can log on.

Knowing which computers can log on? 2000 and XP use user level permissions to access and share resources. A domain model would simplify user access via groups as mentioned. Saving that, you'll need to setup accounts on the file server that matches each remote users credentials/logons. That or have them use RunAs or map drives with different credentials.

As far as drive mappings, if your users are losing their drive mappings you could have a batch file or vbscript in the all users startup folder that would map the drive everytime somone logs on.

 

[BML]

If you want central user authentication you need a domain. RebateMoner is totally right, you should listen to him.

 

[zByte]

Sorry for the late reply, I would like to say thanks.

Another quick question. If I not use simple sharing and use ACL on the shared folder.
If I create a user ZBYTE with pass of PASSBYTE on the machine, and set security rights in the folder for ZBYTE/PASSBYTE to access it, will I have to create a Identical user on the Networked machines in order for them to access it?

If there are 3 computers on the network with the names Joe, Mary and Sam, I will have to create identical username/password accounts on the shared folder host machine to let them see the contents of the folder correct?

Thanks in Advance

 

[BML]

prolly has windows firewall on.

 

[azev]

Sorry for the late reply, I would like to say thanks.

Another quick question. If I not use simple sharing and use ACL on the shared folder.
If I create a user ZBYTE with pass of PASSBYTE on the machine, and set security rights in the folder for ZBYTE/PASSBYTE to access it, will I have to create a Identical user on the Networked machines in order for them to access it?

If there are 3 computers on the network with the names Joe, Mary and Sam, I will have to create identical username/password accounts on the shared folder host machine to let them see the contents of the folder correct?

Thanks in Advance

Yes you are on the money. Without domain, unfortunately you will have to create user account on each of the computer with the same name and password. This way when the user tries to access the shared folder, he/she will not get prompted for password.
If you have a domain however; you can asign the permision only on the box, and the server will authenticate every user that logon, and check for its permission.
You can download windows 2003 trial edition on microsoft and play around with it if you like.
Good luck.

 

[Brazen]

Originally posted by: zByte
Hello,

My question: Scenario- 6 computers in a small office network.
On one computer I have 1 shared folder. Every pc on network can access it.
How can I set it up where I can designate which computers can have access to the computer with the shared folder?

I disable simple sharing, and using ACL. I can set security here. I'm having a lil tough time remembering how to setup where network users can log in either by username/password, or the system knowing which computers can log on.

Besides setting security on a folder share, is there also another way to set something up on the main computer with share, where it can remember which computers are allowed access into it and which ones are not? (either by computer names?)

Anyone with knowledge to both questions please post

zByte

You can use Windows firewall to restrict access by IP address. You would have to set static IP addresses on the client computers, but this would give you access on a per computer basis instead of per user, if that is what you want.

I think there are more com plicated, and more secure ways of doing it, such as using IPSec or certificates (edit: I notice RebateMonger already mentioned this) to restrict all network access to that server, but that is going to be complicated, more complicated than I could help you.