Advanced File Sharing and Workgroups

[Mark]

I'm currently using Simple File Sharing in a mixed XP
Pro/W98SE environment with a router/switch providing a
single shared internet connection. Essentially a home
network with no file server capabilities - basic
folder/printers sharing.

I want to use shared folders but with:
1) one public folder with full access to everyone
2) one private folder with full access to selected users

All shared folders will be stored on one XP Pro machine.

How do I set this up on XP Pro and W98Se given that one
W98SE user requires access to the public shared folder
only and the other W98SE user will required full access
to both the public and the private folder.

Also what are the gotchas with moving from Simple File
Sharing (with printer and folder shares in existence) to
a username-base system as I'm sure there are some tricks
which are undocumented.

I presume I would need to move from a workgroup to a
domain environment but I'm not sure. Appreciate any and
all help/tips.

 

[Ken Wickes [MSFT]]

You don't need a domain.

You will need to turn off Simple File Sharing.

Create users on the XP Pro machine that match the usernames and passwords
that the users use to log into the Win98 machines. Assign permissions on
your shares appropriately to those accounts.

 

[Steve Winograd [MVP]]

I'm currently using Simple File Sharing in a mixed XP
Pro/W98SE environment with a router/switch providing a
single shared internet connection. Essentially a home
network with no file server capabilities - basic
folder/printers sharing.

I want to use shared folders but with:
1) one public folder with full access to everyone
2) one private folder with full access to selected users

All shared folders will be stored on one XP Pro machine.

How do I set this up on XP Pro and W98Se given that one
W98SE user requires access to the public shared folder
only and the other W98SE user will required full access
to both the public and the private folder.

Also what are the gotchas with moving from Simple File
Sharing (with printer and folder shares in existence) to
a username-base system as I'm sure there are some tricks
which are undocumented.

I presume I would need to move from a workgroup to a
domain environment but I'm not sure. Appreciate any and
all help/tips.

Ron Lowe and I have written a web page with full details of setting up
shared folder permissions in Windows XP Professional:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Mark]

Thanks for the info Steve.

I have had mixed information provided on how I should
network my home LAN to ensure appropriate firewall and PC
protection.

I have 2 XP Pro and 2 W98SE machines connected to a
Netgear router/switch which allows sharing of a cable
internet connection as though each PC is connected
directly to the internet. I currently have ICF on each XP
Pro and ZoneAlarm on each W98SE.

How do you recommend I configure them from a network and
firewall perspective? And do I need to use ICS? The
router has a firewall within it but I'm not sure how to
enable it and then how to set the detailed settings.

Thanks
Mark

-----Original Message-----

 

[Steve Winograd [MVP]]

Thanks for the info Steve.

I have had mixed information provided on how I should
network my home LAN to ensure appropriate firewall and PC
protection.

I have 2 XP Pro and 2 W98SE machines connected to a
Netgear router/switch which allows sharing of a cable
internet connection as though each PC is connected
directly to the internet. I currently have ICF on each XP
Pro and ZoneAlarm on each W98SE.

How do you recommend I configure them from a network and
firewall perspective? And do I need to use ICS? The
router has a firewall within it but I'm not sure how to
enable it and then how to set the detailed settings.

Thanks
Mark

You're welcome, Mark.

The router/switch has a built-in firewall function that automatically
protects you computers from undesired incoming traffic from the
Internet. There's nothing to enable or configure.

Since you have a router, you don't need ICS. ICS is a software-based
router that would duplicate the Internet sharing function of your
hardware-based router.

You must disable ICF on each XP computer's LAN connection to allow
file and printer sharing between the computers.

Consider running ZoneAlarm on all of the computers. It has an
important function that isn't available in your router or in ICF:
blocking undesired outgoing traffic from your computers to the
Internet caused by spyware or hacker programs.


--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[CheshireCat]

Thanks for the info Steve.

I have had mixed information provided on how I should
network my home LAN to ensure appropriate firewall and PC
protection.

Hi Mark
Don't use ICF. It can prevent you browsing your network and is aimed at pcs
with a direct connection to the internet. Use Zone Alarm or similar on each
machine instead.
You don't need ICS, that job's being done by the router.
For home use, an unconfigured router alone will provide a natural NAT
firewall for incoming traffic - uninvited incoming hits the router and,
unless a port is forwarded specifically, it stops there because the router
wouldn't know where to send the packets. Firewalls/routers usually allow all
outgoing traffic by default, which is usually the way you want it
Look to your manual for enabling the firewall, this sort of info differs
depending on the model. Don't enable uPNP (unless you really want it and if
the router gives you that option) as it has security implications.
For a home network, you'll probably only need to configure the
firewall/router when you want a LAN pc to act as something like a game
server/host. In this case you need to create a rule on the router to forward
ports to that pc.