Home All Groups Group Topic Archive Search About

Network sharing for only certain users - WinXP Pro

Author
2 Jan 2007 12:09 PM
Brattex
Hi there

I seem to be experiencing problems with network sharing.

We have three users, on the following subnets;

146.230.34.184
146.230.34.192
146.230.92.xxx

I want to share a folder on the first xxx.xxx.34.192 machine which all
three can access.

1. I want to prevent members of USERS from accessing it, and only allow
ADMINISTRATORS to use it. Is there a way to set it up so, depending on
the user's membership level, they get different rights to the folder? A
Yes or No answer will suffice for now to this question, because I can
fiddle from there :)

2. I tried simple file sharing, with the firewall turned OFF, and I get
as far as it finding the directory if I type in:

\\146.230.34.192\PUBLIC

I expect that typing in \\146.230.34.192\ should prompt for a login and
then list the appropriately shared folders, but it doesn't...

So if I specify the \PUBLIC\ folder when connecting, it then prompts
for a user name and password. I type in the user name and password as
I've set it up under USERS in computer management. It then refreshes
the login box with the IP and user name, and prompts again for the
password. No number of attempts will resolve the box from just
refreshing.

I am faced with an IP and user name, but it won't ever accept the login
attempt.

user name: 146.230.34.192\user

Why doesn't it work?
I have definately set up the right user name "user", and right password
"test" but it just ignores the login attempts.

Once I've got the simple file-sharing done, I will move onto the
advanced features, which I'm pretty sure I can figure out; for now -
why is it prompting with an IP\user and how do I get it to login with
the credentials as specified on the host computer?

Is there a way to go \\146.230.34.92\ and then it lists all shared
directories according to the user name I typed in to get there?
Presently it doesn't resolve; only pointing directly to the sharename
of the folder will get a login prompt.

Help?

Author
2 Jan 2007 1:59 PM
Steve Winograd [MVP]
In article <1167739763.031204.134***@s34g2000cwa.googlegroups.com>,
"Brattex" <johnst***@ukzn.ac.za> wrote:
>Hi there
>
>I seem to be experiencing problems with network sharing.
>
>We have three users, on the following subnets;
>
>146.230.34.184
>146.230.34.192
>146.230.92.xxx

Those are public IP addresses.  Unless they were assigned to you by an
Internet authority, using them could block your access to some web
sites.  It's better to use one of these private IP address ranges on a
LAN:

   10.0.0.0 - 10.255.255.255
   172.16.0.0 - 172.31.255.255
   192.168.0.0 - 192.168.255.255

>I want to share a folder on the first xxx.xxx.34.192 machine which all
>three can access.
>
>1. I want to prevent members of USERS from accessing it, and only allow
>ADMINISTRATORS to use it. Is there a way to set it up so, depending on
>the user's membership level, they get different rights to the folder? A
>Yes or No answer will suffice for now to this question, because I can
>fiddle from there :)

Yes.

You can specify access rights based on users and groups defined on the
server computer.

Show quoteHide quote
>2. I tried simple file sharing, with the firewall turned OFF, and I get
>as far as it finding the directory if I type in:
>
>\\146.230.34.192\PUBLIC
>
>I expect that typing in \\146.230.34.192\ should prompt for a login and
>then list the appropriately shared folders, but it doesn't...
>
>So if I specify the \PUBLIC\ folder when connecting, it then prompts
>for a user name and password. I type in the user name and password as
>I've set it up under USERS in computer management. It then refreshes
>the login box with the IP and user name, and prompts again for the
>password. No number of attempts will resolve the box from just
>refreshing.
>
>I am faced with an IP and user name, but it won't ever accept the login
>attempt.
>
>user name: 146.230.34.192\user
>
>Why doesn't it work?
>I have definately set up the right user name "user", and right password
>"test" but it just ignores the login attempts.

Simple file sharing can't do what you want.  It allows all users on
all computers to access all shared folders.  There's no distinction
between users or groups with simple file sharing enabled.

There shouldn't be a login prompt with simple file sharing enabled on
the server unless you explicitly create a network password for the
Guest account.  If you do that, all access requests will be prompted
for that single password.

The Guest account settings in Control Panel > User Accounts have
nothing to do with networking.  To create a network password for the
Guest account on the server:

1. Click Start > Run.
2. Type "control userpasswords2" in the box and click OK.
3. Click Guest.
4. Click Reset Password.
5. Enter a password and click OK.

>Once I've got the simple file-sharing done, I will move onto the
>advanced features, which I'm pretty sure I can figure out; for now -
>why is it prompting with an IP\user and how do I get it to login with
>the credentials as specified on the host computer?

With simple file sharing disabled, a Windows XP server computer uses
its local user accounts and groups to validate access requests from
users on other computers:

1. When a client computer attempts to access a shared folder belonging
to a Windows XP server, the client sends the credentials (user name
and password) of the current logged-in user along with the request. 

2.  If the credentials match a user account that exists on the server,
the client is granted the type of access (e.g. none, read, full
control) defined for that user account or its user group in the shared
folder's permissions.

3. If the credentials don't match, the server causes the client to
prompt for different credentials.  If the client runs Windows 95, 98,
or Me, there's no valid response to the prompt.  If the client runs
Windows 2000 or XP, the user can specify a different user name and
password.

>Is there a way to go \\146.230.34.92\ and then it lists all shared
>directories according to the user name I typed in to get there?

There's no way to display only the shares that a particular user name
is allowed to access.

>Presently it doesn't resolve; only pointing directly to the sharename
>of the folder will get a login prompt.
>
>Help?

Ron Lowe and I have written a web site that shows how to control
access based on user accounts and groups defined on the server
computer:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see.  I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
Author
13 Jan 2007 10:57 PM
jason.denison
I just wanted to thank Steve for taking the time to post this.  It
saved me a TON of time and was a huge help.  Google Groups is a life
saver because of people like you who take the time to post fixes.  Once
I set my firewall settings and changed my guest password everything
worked perfectly.

I'm still new to Networking but I knew I could reply on Google Groups
like I do often and once again it answered the question and saved me a
ton of time!!

THANKS!!!!!!!!!!
Author
14 Jan 2007 2:18 AM
Steve Winograd [MVP]
In article <1168729043.478919.204***@l53g2000cwa.googlegroups.com>,
jason.deni***@gmail.com wrote:
Show quoteHide quote
>>>Hi there
>>>
>>>I seem to be experiencing problems with network sharing.
>>>
>>>We have three users, on the following subnets;
>>>
>>>146.230.34.184
>>>146.230.34.192
>>>146.230.92.xxx
>>
>>Those are public IP addresses.  Unless they were assigned to you by an
>>Internet authority, using them could block your access to some web
>>sites.  It's better to use one of these private IP address ranges on a
>>LAN:
>>
>>   10.0.0.0 - 10.255.255.255
>>   172.16.0.0 - 172.31.255.255
>>   192.168.0.0 - 192.168.255.255
>>
>>>I want to share a folder on the first xxx.xxx.34.192 machine which all
>>>three can access.
>>>
>>>1. I want to prevent members of USERS from accessing it, and only allow
>>>ADMINISTRATORS to use it. Is there a way to set it up so, depending on
>>>the user's membership level, they get different rights to the folder? A
>>>Yes or No answer will suffice for now to this question, because I can
>>>fiddle from there :)
>>
>>Yes.
>>
>>You can specify access rights based on users and groups defined on the
>>server computer.
>>
>>>2. I tried simple file sharing, with the firewall turned OFF, and I get
>>>as far as it finding the directory if I type in:
>>>
>>>\\146.230.34.192\PUBLIC
>>>
>>>I expect that typing in \\146.230.34.192\ should prompt for a login and
>>>then list the appropriately shared folders, but it doesn't...
>>>
>>>So if I specify the \PUBLIC\ folder when connecting, it then prompts
>>>for a user name and password. I type in the user name and password as
>>>I've set it up under USERS in computer management. It then refreshes
>>>the login box with the IP and user name, and prompts again for the
>>>password. No number of attempts will resolve the box from just
>>>refreshing.
>>>
>>>I am faced with an IP and user name, but it won't ever accept the login
>>>attempt.
>>>
>>>user name: 146.230.34.192\user
>>>
>>>Why doesn't it work?
>>>I have definately set up the right user name "user", and right password
>>>"test" but it just ignores the login attempts.
>>
>>Simple file sharing can't do what you want.  It allows all users on
>>all computers to access all shared folders.  There's no distinction
>>between users or groups with simple file sharing enabled.
>>
>>There shouldn't be a login prompt with simple file sharing enabled on
>>the server unless you explicitly create a network password for the
>>Guest account.  If you do that, all access requests will be prompted
>>for that single password.
>>
>>The Guest account settings in Control Panel > User Accounts have
>>nothing to do with networking.  To create a network password for the
>>Guest account on the server:
>>
>>1. Click Start > Run.
>>2. Type "control userpasswords2" in the box and click OK.
>>3. Click Guest.
>>4. Click Reset Password.
>>5. Enter a password and click OK.
>>
>>>Once I've got the simple file-sharing done, I will move onto the
>>>advanced features, which I'm pretty sure I can figure out; for now -
>>>why is it prompting with an IP\user and how do I get it to login with
>>>the credentials as specified on the host computer?
>>
>>With simple file sharing disabled, a Windows XP server computer uses
>>its local user accounts and groups to validate access requests from
>>users on other computers:
>>
>>1. When a client computer attempts to access a shared folder belonging
>>to a Windows XP server, the client sends the credentials (user name
>>and password) of the current logged-in user along with the request. 
>>
>>2.  If the credentials match a user account that exists on the server,
>>the client is granted the type of access (e.g. none, read, full
>>control) defined for that user account or its user group in the shared
>>folder's permissions.
>>
>>3. If the credentials don't match, the server causes the client to
>>prompt for different credentials.  If the client runs Windows 95, 98,
>>or Me, there's no valid response to the prompt.  If the client runs
>>Windows 2000 or XP, the user can specify a different user name and
>>password.
>>
>>>Is there a way to go \\146.230.34.92\ and then it lists all shared
>>>directories according to the user name I typed in to get there?
>>
>>There's no way to display only the shares that a particular user name
>>is allowed to access.
>>
>>>Presently it doesn't resolve; only pointing directly to the sharename
>>>of the folder will get a login prompt.
>>>
>>>Help?
>>
>>Ron Lowe and I have written a web site that shows how to control
>>access based on user accounts and groups defined on the server
>>computer:
>>
>>Windows XP Professional File Sharing
>>http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
>
>I just wanted to thank Steve for taking the time to post this.  It
>saved me a TON of time and was a huge help.  Google Groups is a life
>saver because of people like you who take the time to post fixes.  Once
>I set my firewall settings and changed my guest password everything
>worked perfectly.
>
>I'm still new to Networking but I knew I could reply on Google Groups
>like I do often and once again it answered the question and saved me a
>ton of time!!
>
>THANKS!!!!!!!!!!

You're welcome, Jason!  I'm glad that my earlier message helped you
solve the problem.

I read the original question and answered it in the news group called
"microsoft.public.windowsxp.network_web" on the Microsoft news server
"msnews.microsoft.com".  Google Groups just copied the answer and made
it available. 
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see.  I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com