Windows XP share securities AND Internet Connection sharing

J

Jason

Hi all

I have two questions.

1 - :
I have 3 machines running Windows XP pro, they are not part of any domain.
so they are basically in a peer-to-peer network. I want to open up a share
on machine1, but that share must only give access to the user account "bob"
with the password "bob". now, as far as i know i would just create a new
user on machine1 called "bob", make sure simple file sharing is off, and
when opening the share i specify the users who have access to the share.
This works fine and simply enough in windows 2000, but i cant seem to get it
to work with windows xp.
am i missing something painfully obvious?

2 - :
again on a peer-to-peer network i have a ICS host machine. whether it be
windows 2000 or windows xp. i would rather have it be windows 2000 for other
reasons. but my question is this. once i have setup ICS, how do i add access
permissions. i otherwords, if machine4 is new to the network and he wanted
to access the internet through my ICS host, he would first have to properly
authorise himself before gaining access. i suppose similar to the way
corporates setup their internet access...

Thanks
Jason
 
R

Richard G. Harper

1. Dunno - why does it not work? Does it allow everyone access? Does it
allow no one access? Details are important.

2. No. There is no authorization to use ICS, a properly-configured
computer on the network will see the ICS 'server' and connect to it
accordingly. Usually this is as simple as setting TCP/IP to pick up its IP
and DNS addresses automatically and turning off any dial-up settings in
Explorer's Connections dialog.
 
J

Jason

Richard G. Harper said:
1. Dunno - why does it not work? Does it allow everyone access? Does it
allow no one access? Details are important.

Heh right, sorry. It just doesnt work. The machine (windows xp pro) trying
to access the shares gets a message saying he does not have rights. could it
be that it is remembering the connection under the Guest username? I just
find it odd that, I find it so easy to get it working at work (where there
is a domain) yet, elsewhere, where there is no domain, i have endless
trouble. i have gotten it to work once, where i setup a single user with a
password. people connecting had to use that username and password, but as
soon as i tried to create another username and password for other shares it
would not work. example i have "share1" which is for "bob" and "share2"
which is for "tom". and i get this all working in windows 2000.
2. No. There is no authorization to use ICS, a properly-configured
computer on the network will see the ICS 'server' and connect to it
accordingly. Usually this is as simple as setting TCP/IP to pick up its IP
and DNS addresses automatically and turning off any dial-up settings in
Explorer's Connections dialog.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Jason said:
Hi all

I have two questions.

1 - :
I have 3 machines running Windows XP pro, they are not part of any domain.
so they are basically in a peer-to-peer network. I want to open up a share
on machine1, but that share must only give access to the user account "bob"
with the password "bob". now, as far as i know i would just create a new
user on machine1 called "bob", make sure simple file sharing is off, and
when opening the share i specify the users who have access to the share.
This works fine and simply enough in windows 2000, but i cant seem to
get
it
to work with windows xp.
am i missing something painfully obvious?

2 - :
again on a peer-to-peer network i have a ICS host machine. whether it be
windows 2000 or windows xp. i would rather have it be windows 2000 for other
reasons. but my question is this. once i have setup ICS, how do i add access
permissions. i otherwords, if machine4 is new to the network and he wanted
to access the internet through my ICS host, he would first have to properly
authorise himself before gaining access. i suppose similar to the way
corporates setup their internet access...

Thanks
Jason
 
R

Richard G. Harper

The reason it works so well at work where you have a domain is because the
domain controller and AD accounts handle all access to shares. In a
workgroup you have to roll up your sleeves and do all the dirty work
yourself.

It sounds to me like you're trying to mix and match user names and share
names, which gets pretty messy pretty quickly unless you keep very careful
track of what shares are authorized for what users. The fact that you can
get it working when everyone is forced to use one logon account tells me
that the network is working correctly and the computers can all see each
other, which is 95% of the battle. The rest simply involves making sure
that when you create shares you associate them with the correct people you
want to be able to access them.

One thing you cannot do is access a share on a given PC with one username
and password, then try to connect to a second one using a second username
and password. That's a really good way to make both shares inoperable in a
hurry.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Jason said:
Richard G. Harper said:
1. Dunno - why does it not work? Does it allow everyone access? Does it
allow no one access? Details are important.

Heh right, sorry. It just doesnt work. The machine (windows xp pro) trying
to access the shares gets a message saying he does not have rights. could it
be that it is remembering the connection under the Guest username? I just
find it odd that, I find it so easy to get it working at work (where there
is a domain) yet, elsewhere, where there is no domain, i have endless
trouble. i have gotten it to work once, where i setup a single user with a
password. people connecting had to use that username and password, but as
soon as i tried to create another username and password for other shares it
would not work. example i have "share1" which is for "bob" and "share2"
which is for "tom". and i get this all working in windows 2000.
2. No. There is no authorization to use ICS, a properly-configured
computer on the network will see the ICS 'server' and connect to it
accordingly. Usually this is as simple as setting TCP/IP to pick up its IP
and DNS addresses automatically and turning off any dial-up settings in
Explorer's Connections dialog.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Jason said:
Hi all

I have two questions.

1 - :
I have 3 machines running Windows XP pro, they are not part of any domain.
so they are basically in a peer-to-peer network. I want to open up a share
on machine1, but that share must only give access to the user account "bob"
with the password "bob". now, as far as i know i would just create a new
user on machine1 called "bob", make sure simple file sharing is off, and
when opening the share i specify the users who have access to the share.
This works fine and simply enough in windows 2000, but i cant seem to
get
it
to work with windows xp.
am i missing something painfully obvious?

2 - :
again on a peer-to-peer network i have a ICS host machine. whether it be
windows 2000 or windows xp. i would rather have it be windows 2000 for other
reasons. but my question is this. once i have setup ICS, how do i add access
permissions. i otherwords, if machine4 is new to the network and he wanted
to access the internet through my ICS host, he would first have to properly
authorise himself before gaining access. i suppose similar to the way
corporates setup their internet access...

Thanks
Jason
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top