PC Review


Reply
Thread Tools Rate Thread

Can't set permissions

 
 
=?Utf-8?B?Um9iIFJvYXJr?=
Guest
Posts: n/a
 
      20th Nov 2004
I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
to use a NTFS partition on one of them to back up data from the other. I
want to set permissions so that only the user of the PC doing the backup can
see the data (not even the user on the PC being backed up to) I've tried to
set it so that only that user has read/write, etc. permissions, but whenever
I attempt to add a user to the list in the sharing tab of the partition, I'm
unable to search anything other than the local machine. How can I add a user
on another PC?
 
Reply With Quote
 
 
 
 
Steve Winograd [MVP]
Guest
Posts: n/a
 
      20th Nov 2004
In article <5FBFAD14-D432-460C-8D8A-(E-Mail Removed)>, Rob
Roark <(E-Mail Removed)> wrote:
>I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
>to use a NTFS partition on one of them to back up data from the other. I
>want to set permissions so that only the user of the PC doing the backup can
>see the data (not even the user on the PC being backed up to) I've tried to
>set it so that only that user has read/write, etc. permissions, but whenever
>I attempt to add a user to the list in the sharing tab of the partition, I'm
>unable to search anything other than the local machine. How can I add a user
>on another PC?


That's how it is in a workgroup, Rob: you can only specify permissions
for users on the local machine. Create a user account on the local
machine with the same user name and password that you use to log onto
the other machine. The permissions that you set for the local user
will also apply to the network user. Specify the user as:

LocalMachine\UserName

I don't think it's possible to prevent the user on the local machine
from accessing its own data on the local machine.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Reply With Quote
 
=?Utf-8?B?Um9iIFJvYXJr?=
Guest
Posts: n/a
 
      20th Nov 2004


"Steve Winograd [MVP]" wrote:

> In article <5FBFAD14-D432-460C-8D8A-(E-Mail Removed)>, Rob
> Roark <(E-Mail Removed)> wrote:
> >I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
> >to use a NTFS partition on one of them to back up data from the other. I
> >want to set permissions so that only the user of the PC doing the backup can
> >see the data (not even the user on the PC being backed up to) I've tried to
> >set it so that only that user has read/write, etc. permissions, but whenever
> >I attempt to add a user to the list in the sharing tab of the partition, I'm
> >unable to search anything other than the local machine. How can I add a user
> >on another PC?

>
> That's how it is in a workgroup, Rob: you can only specify permissions
> for users on the local machine. Create a user account on the local
> machine with the same user name and password that you use to log onto
> the other machine. The permissions that you set for the local user
> will also apply to the network user. Specify the user as:
>
> LocalMachine\UserName
>
> I don't think it's possible to prevent the user on the local machine
> from accessing its own data on the local machine.
> --
> Best Wishes,
> Steve Winograd, MS-MVP (Windows Networking)
>
> Please post any reply as a follow-up message in the news group
> for everyone to see. I'm sorry, but I don't answer questions
> addressed directly to me in E-mail or news groups.
>
> Microsoft Most Valuable Professional Program
> http://mvp.support.microsoft.com
>


Would it be possible if I were to specify only that user, and remove the
"everyone" group, Also, setting the new user as "owner" of the share?
 
Reply With Quote
 
Steve Winograd [MVP]
Guest
Posts: n/a
 
      20th Nov 2004
In article <32798E19-17CE-44D3-8032-(E-Mail Removed)>, Rob
Roark <(E-Mail Removed)> wrote:
>> >I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
>> >to use a NTFS partition on one of them to back up data from the other. I
>> >want to set permissions so that only the user of the PC doing the backup can
>> >see the data (not even the user on the PC being backed up to) I've tried to
>> >set it so that only that user has read/write, etc. permissions, but whenever
>> >I attempt to add a user to the list in the sharing tab of the partition, I'm
>> >unable to search anything other than the local machine. How can I add a user
>> >on another PC?

>>
>> That's how it is in a workgroup, Rob: you can only specify permissions
>> for users on the local machine. Create a user account on the local
>> machine with the same user name and password that you use to log onto
>> the other machine. The permissions that you set for the local user
>> will also apply to the network user. Specify the user as:
>>
>> LocalMachine\UserName
>>
>> I don't think it's possible to prevent the user on the local machine
>> from accessing its own data on the local machine.

>
>Would it be possible if I were to specify only that user, and remove the
>"everyone" group, Also, setting the new user as "owner" of the share?


I don't think that you can prevent the owner of a folder from
accessing the folder. Even if you could, I don't think it would do
what you want, because the matching user account on the other computer
wouldn't be able to access it, either.

The best way to see if something will work is to try it.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Reply With Quote
 
=?Utf-8?B?Um9iIFJvYXJr?=
Guest
Posts: n/a
 
      21st Nov 2004


"Steve Winograd [MVP]" wrote:

> In article <32798E19-17CE-44D3-8032-(E-Mail Removed)>, Rob
> Roark <(E-Mail Removed)> wrote:
> >> >I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
> >> >to use a NTFS partition on one of them to back up data from the other. I
> >> >want to set permissions so that only the user of the PC doing the backup can
> >> >see the data (not even the user on the PC being backed up to) I've tried to
> >> >set it so that only that user has read/write, etc. permissions, but whenever
> >> >I attempt to add a user to the list in the sharing tab of the partition, I'm
> >> >unable to search anything other than the local machine. How can I add a user
> >> >on another PC?
> >>
> >> That's how it is in a workgroup, Rob: you can only specify permissions
> >> for users on the local machine. Create a user account on the local
> >> machine with the same user name and password that you use to log onto
> >> the other machine. The permissions that you set for the local user
> >> will also apply to the network user. Specify the user as:
> >>
> >> LocalMachine\UserName
> >>
> >> I don't think it's possible to prevent the user on the local machine
> >> from accessing its own data on the local machine.

> >
> >Would it be possible if I were to specify only that user, and remove the
> >"everyone" group, Also, setting the new user as "owner" of the share?

>
> I don't think that you can prevent the owner of a folder from
> accessing the folder. Even if you could, I don't think it would do
> what you want, because the matching user account on the other computer
> wouldn't be able to access it, either.
>
> The best way to see if something will work is to try it.
> --
> Best Wishes,
> Steve Winograd, MS-MVP (Windows Networking)
>
> Please post any reply as a follow-up message in the news group
> for everyone to see. I'm sorry, but I don't answer questions
> addressed directly to me in E-mail or news groups.
>
> Microsoft Most Valuable Professional Program
> http://mvp.support.microsoft.com
>


It can be done! I made an account like you said, then set it as having full
priveleges. I deleted the "Everyone" group, then for good measure I added
the original creator of the share, and gave a deny all to them (since denies
to presedence over allows) I had to login before mapping the drive, but now
it works like a charm! Thank you for steering me in the right direction!
 
Reply With Quote
 
Steve Winograd [MVP]
Guest
Posts: n/a
 
      21st Nov 2004
In article <999D92A5-EAB0-44F9-92F3-(E-Mail Removed)>, Rob
Roark <(E-Mail Removed)> wrote:
>> >> >I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
>> >> >to use a NTFS partition on one of them to back up data from the other. I
>> >> >want to set permissions so that only the user of the PC doing the backup can
>> >> >see the data (not even the user on the PC being backed up to) I've tried to
>> >> >set it so that only that user has read/write, etc. permissions, but whenever
>> >> >I attempt to add a user to the list in the sharing tab of the partition, I'm
>> >> >unable to search anything other than the local machine. How can I add a user
>> >> >on another PC?
>> >>
>> >> That's how it is in a workgroup, Rob: you can only specify permissions
>> >> for users on the local machine. Create a user account on the local
>> >> machine with the same user name and password that you use to log onto
>> >> the other machine. The permissions that you set for the local user
>> >> will also apply to the network user. Specify the user as:
>> >>
>> >> LocalMachine\UserName
>> >>
>> >> I don't think it's possible to prevent the user on the local machine
>> >> from accessing its own data on the local machine.
>> >
>> >Would it be possible if I were to specify only that user, and remove the
>> >"everyone" group, Also, setting the new user as "owner" of the share?

>>
>> I don't think that you can prevent the owner of a folder from
>> accessing the folder. Even if you could, I don't think it would do
>> what you want, because the matching user account on the other computer
>> wouldn't be able to access it, either.
>>
>> The best way to see if something will work is to try it.

>
>It can be done! I made an account like you said, then set it as having full
>priveleges. I deleted the "Everyone" group, then for good measure I added
>the original creator of the share, and gave a deny all to them (since denies
>to presedence over allows) I had to login before mapping the drive, but now
>it works like a charm! Thank you for steering me in the right direction!


You're welcome! Can you access the share from another computer but
not from the local computer? If so, you've done something that I
didn't think was possible, and I've learned something from you.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Reply With Quote
 
=?Utf-8?B?Um9iIFJvYXJr?=
Guest
Posts: n/a
 
      21st Nov 2004


"Steve Winograd [MVP]" wrote:

> In article <999D92A5-EAB0-44F9-92F3-(E-Mail Removed)>, Rob
> Roark <(E-Mail Removed)> wrote:
> >> >> >I've got two PC's in the same workgroup, both running XP Pro SP2. I'd like
> >> >> >to use a NTFS partition on one of them to back up data from the other. I
> >> >> >want to set permissions so that only the user of the PC doing the backup can
> >> >> >see the data (not even the user on the PC being backed up to) I've tried to
> >> >> >set it so that only that user has read/write, etc. permissions, but whenever
> >> >> >I attempt to add a user to the list in the sharing tab of the partition, I'm
> >> >> >unable to search anything other than the local machine. How can I add a user
> >> >> >on another PC?
> >> >>
> >> >> That's how it is in a workgroup, Rob: you can only specify permissions
> >> >> for users on the local machine. Create a user account on the local
> >> >> machine with the same user name and password that you use to log onto
> >> >> the other machine. The permissions that you set for the local user
> >> >> will also apply to the network user. Specify the user as:
> >> >>
> >> >> LocalMachine\UserName
> >> >>
> >> >> I don't think it's possible to prevent the user on the local machine
> >> >> from accessing its own data on the local machine.
> >> >
> >> >Would it be possible if I were to specify only that user, and remove the
> >> >"everyone" group, Also, setting the new user as "owner" of the share?
> >>
> >> I don't think that you can prevent the owner of a folder from
> >> accessing the folder. Even if you could, I don't think it would do
> >> what you want, because the matching user account on the other computer
> >> wouldn't be able to access it, either.
> >>
> >> The best way to see if something will work is to try it.

> >
> >It can be done! I made an account like you said, then set it as having full
> >priveleges. I deleted the "Everyone" group, then for good measure I added
> >the original creator of the share, and gave a deny all to them (since denies
> >to presedence over allows) I had to login before mapping the drive, but now
> >it works like a charm! Thank you for steering me in the right direction!

>
> You're welcome! Can you access the share from another computer but
> not from the local computer? If so, you've done something that I
> didn't think was possible, and I've learned something from you.
> --
> Best Wishes,
> Steve Winograd, MS-MVP (Windows Networking)
>
> Please post any reply as a follow-up message in the news group
> for everyone to see. I'm sorry, but I don't answer questions
> addressed directly to me in E-mail or news groups.
>
> Microsoft Most Valuable Professional Program
> http://mvp.support.microsoft.com
>


I get an access denied dialog when trying it on the local machine., and I
only get a login prompt on the PC with the matching account. One of my other
networked PC's says something about not having sufficient priveliges.
 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
In-depth documenation on User Permissions, Group Permissions, ACLs, DCLs etc. Curt K Microsoft ASP .NET 0 3rd Nov 2006 04:54 PM
Files without inherited permissions always deletable despite object specific permissions? WakA Microsoft Windows 2000 Security 10 12th Mar 2005 02:14 AM
ASPX file returning obscur runtime error - after changing permissions to a subweb (.net app) to different permissions than on its parent ? Isabelle Microsoft ASP .NET 0 11th Aug 2004 03:04 PM
problems relating to Client Permissions - NT Security Descriptor vs. MAPI Permissions in Exchange 2003 Bill Nguyen Microsoft Outlook 0 3rd Aug 2004 10:02 PM
Windows 2003 - Share Permissions & Security Permissions =?Utf-8?B?U25haWw=?= Microsoft Windows 2000 Security 1 24th Mar 2004 02:09 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 10:55 AM.