Did Microsoft Dumb Down Security for XP?

[Henry]

I am used to working with server level security where you can assign a
security access level for a directory, or file, etc. to a user or group.

I am looking at XP Pro and it seems the only option I have is to share or
not to share. It doesn't give me the option to give specified users or
groups access and deny access to others. Or at least that function is not
obvious as it is is on the servers. This workstation is not in a domain, but
I still want that functionality.

Am I missing something here? I would think that level of security should be
pretty fundamental even for a workstation.

 

[Kerry Brown]

Turn off simple file sharing.

Open My Computer or Windows Explorer, Tools, Folder Options, View, Scroll
down to the bottom of the list and uncheck Simple File Sharing.

 

[Wesley Vogel]

You have to disable simplified sharing first.

How to disable simplified sharing and set permissions on a shared folder in
Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;307874

How to configure file sharing in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;304040

HOW TO: Set, View, Change, or Remove Special Permissions for Files and
Folders in Windows XPy
http://support.microsoft.com/default.aspx?scid=kb;en-us;308419

How to set, view, change, or remove file and folder permissions
in Windows XP
http://support.microsoft.com/kb/308418

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Steven L Umbach]

Kerry and Wesley told you how to fix it. Don't feel bad the first time I
tried XP Pro I was scratching my head over that also. FYI when a XP Pro
computer is joined to an Active Directory domain simple file sharing is
automatically disabled. --- Steve

 

[Kerry Brown]

Kerry and Wesley told you how to fix it. Don't feel bad the first
time I tried XP Pro I was scratching my head over that also. FYI when
a XP Pro computer is joined to an Active Directory domain simple file
sharing is automatically disabled. --- Steve

It doesn't always switch when joining a domain. The computer I'm typing this
on was on a Server 2003 domain with simple file sharing disabled. When I
removed it from that domain and joined a SBS 2003 domain simple file sharing
was re-enabled. So far I haven't found the reason. I've just started working
with SBS and am still learning all it's quirks.

 

[Steven L Umbach]

Interesting. I have never seen that happen in a Windows 2000/2003 domain. I
wonder if the SBS domain had modified the security option for network
access: sharing and security model for model for local accounts to be guest
only via Group Policy?? Running rsop.msc on the XP Pro domain computer could
verify such. I don't know much about SBS and would be real surprised if
simple file sharing is supposed to be enabled in a SBS domain. --- Steve

 

[Kerry Brown]

It's not group policy. Once I disabled simple file sharing it didn't come
back. Rsop doesn't show up anything. I can't duplicate it. The only odd
thing was I used a combination of FAST and copying files to migrate the user
profile rather than the SBS connectcomputer wizard. As this is my personal
computer I wanted a little more control over the migration.

 

[Steven L Umbach]

Weird. One of these days I need to set up SBS on my test network. ---
Steve

 

[Kerry Brown]

It's well worth it. I was playing with it in a test lab because it sounded
like a perfect fit for a customer. I liked it so much I changed my home
office over. For SOHO and small business the prices/features can't be beat.
The wizards are truly useful. The wizards make it almost impossible to get a
really bad setup and nothing gets missed or forgotten. All that said it's
quite different from normal "best practices" for a DC setup. I highly
recommend trying several test installs in a lab before deploying it.