Guest Account vs Other computers on the network

[DenoxiS]

Hi,

I want to setup an account for an intern started in my friend's
office. There are 4-5 computers in the office under a workgroup, and
all of them has some folders shared over the network. They want the
intern to access the Internet, run MS Office and that's it. They don't
want this account to;
1) Access any other computer on the network.
2) Access any other folder on the same computer.

When I open the Guest account, everything looks pretty much what they
need but the Guest account can access to local folders. To avoid this
I added the Guest account to the user list under the Security tab for
each folder, and checked the "Deny All" box. After that Guest could
only access to the internet and its own folder. On the other hand as
soon as I gave "deny" for the guest, access to these folders from
other computers on the network also denied. When I remove the "deny",
Guest and other network users could access to the local folders.

Do the other computers on the network have the same rights as the
guest? Is there any way to seperate them? i.e. Can I give read/write
access to the remote guests while limit the local Guest?

I also tried to create a limited account, but it has much more rights
to limit so I don't know if I really need to go there.

Any help is appreciated.

Thank you.

 

[Doug Knox MS-MVP]

Do not use Deny, uncheck Allow instead. Deny permissions takes precedence
over Allowed permissions.

 

[Guest]

Also, since your workgroup is unable to use user access lists from other comptuers in the workgroup, they must be explicitly allowed to access your shares by typing their name in the share's security tab (ex- computername\username). Since there is no domain controller to manage global permissions the local computer's deny setting will override any other settings on the other computers. Hope this helps.

 

[DenoxiS]

Do not use Deny, uncheck Allow instead. Deny permissions takes precedence
over Allowed permissions.

I tried that too, but the Guest still could access to the folders when
there is no check on any of the Allowed/Denied rights.

 

[Doug Knox MS-MVP]

You may have to uncheck Allow Permissions for specific groups, then Allow
access for specific users. Also, if you're running XP Home, all user
accessing resources across the network authenticate as Guest.