How to allow someone to access my computer with their own username

[Smithy963]

Hi,

I'm using a laptop, running windows vista. A friend and I often share files
between us and when connecting to my computer via network he uses my username
and password to connect and take the files I have shared.

Ideally I would like him to click on my computer in the network then
automatically view my files under his own account name, or at least be able
to type in his own username and password. BUT I do not want to have another
account active on my own computer. (ie, 2 user accounts available on my log
in screen).

Also, I obviously do not want any security flaws so only he can access my
computer with his details.

Many thanks in advance,

Smithy963.

 

[Mike Brannigan]

Hi,

I'm using a laptop, running windows vista. A friend and I often share
files
between us and when connecting to my computer via network he uses my
username
and password to connect and take the files I have shared.

Ideally I would like him to click on my computer in the network then
automatically view my files under his own account name, or at least be
able
to type in his own username and password. BUT I do not want to have
another
account active on my own computer. (ie, 2 user accounts available on my
log
in screen).

Then you can't do this.
How do you think he will use his own username and password if he does not
have a account on your computer?
So what if you get another icon on the logon screen for him - why should you
care - you want him to have his own account to ensure he is authenticated
for authorized access to files and folders, so either live with him having
an account on your machine and thus an icon on the desktop or go on using
your massively insecure current method.

 

[Smithy963]

What?

You are trying to tell me there is noway to share a file and give
permissions to a remote user account not on my computer.

-or-

Create a new user account specifically for him and disable it from appearing
on my log in screen.

Its my Laptop and he will never be accessing my computer physically, thus
its pointless having a whole user account and icon for him.

 

[Smithy963]

Your saying that for 2 people, with 2 computers need 4 accounts to access
both computers at all times....

This is ineffecient and pointless, similar to your post, don't post in my
thread aagain. thank you.

 

[Mike Brannigan]

What?

You are trying to tell me there is noway to share a file and give
permissions to a remote user account not on my computer.

-or-

Create a new user account specifically for him and disable it from
appearing
on my log in screen.

Its my Laptop and he will never be accessing my computer physically, thus
its pointless having a whole user account and icon for him.

Since you are in a workgroup - the security model offered by Windows is one
of each machine having a local database of user accounts. There fore if you
wish to secure any resource to a specific user the only accounts the device
knows about are those locally held in its local account database. Therefore
if you want to secure a resource to a named user account you must create an
account for that user.

As to hiding the account from the login UI this is documented in Microsoft
KB article 942956
http://support.microsoft.com/kb/942956

Alternatively don't use the icon based login screen and just enable the
pressing of CTRL-ALT-DELL to logon and then enter your account details.

 

[Mike Brannigan]

Your saying that for 2 people, with 2 computers need 4 accounts to access
both computers at all times....

Yes - if you are in a workgroup and you want user level security for access
to resources local or shared on that device then you must have local
accounts on that device to secure against.

This is ineffecient and pointless,

This is the way it has always been for workgroup based conmputing. Of
course this goes away when in domain based secuirty models.

similar to your post, don't post in my
thread aagain. thank you.

No point is getting shirty - just because you do not understand anything
about the Windows security (or have not bothered to do any research to help
yourself). The product is capable of workgroup or domain based
authentication/authorization. You are in a workgroup so the simple rules of
all accounts that you want to secure a resource on your device have to be
local accounts on that device apply. Hardly my fault - this is why
workgroup computing is inherently insecure and not really usable for
anything more then a couple to a few users and machines.

 

[Smithy963]

I seem to be in a bad mood today along with sensing hostility in your
previous post I lashed out and I apologise.

Thank you for your support and advice. This is not the solution I am idealy
looking for as I have 4 friends that will access my computer and for seperate
persmissions for each person would require 16 users accounts over all 4
computers.

Shaun.

 

[Smithy963]

I seem to be in a bad mood today along with sensing hostility in your
previous post I lashed out and I apologise.

Thank you for your support and advice. This is not the solution I am idealy
looking for as I have 4 friends that will access my computer and for seperate
persmissions for each person would require 16 users accounts over all 4
computers.
------------------------------------------------------------------------------------

I can assure you I am doing my research, It is true I dont fully understand
windows security.

If I am excused of my outburst would you consider suggesting a practical
approach to my problem...

There are 4 computers.

We could be connecting in any number of different locations so a
server/domain based system seems to be out of the question.

I would prefer different shared folders and different permissions for each
user, so 1 user account and telling my friends the same account details is
also not applicable.

And if at all possible I would prefer not to have 4 different accounts on my
computer and have to change various options for each user on every machine
when needed.

Is there a solution via hacks/software development/any solution at all...
that would allow me to use a remote account to set permissions and logg in
details.

 

[Mike Brannigan]

I seem to be in a bad mood today along with sensing hostility in your
previous post I lashed out and I apologise.

Thank you for your support and advice. This is not the solution I am
idealy
looking for as I have 4 friends that will access my computer and for
seperate
persmissions for each person would require 16 users accounts over all 4
computers.
------------------------------------------------------------------------------------

I can assure you I am doing my research, It is true I dont fully
understand
windows security.

If I am excused of my outburst would you consider suggesting a practical
approach to my problem...

There are 4 computers.

We could be connecting in any number of different locations so a
server/domain based system seems to be out of the question.

I would prefer different shared folders and different permissions for each
user, so 1 user account and telling my friends the same account details is
also not applicable.

And if at all possible I would prefer not to have 4 different accounts on
my
computer and have to change various options for each user on every machine
when needed.

Is there a solution via hacks/software development/any solution at all...
that would allow me to use a remote account to set permissions and logg in
details.

No - the solution for unique users being given permissions to resources and
then using those unique accounts to access those on a device requires one of
two options.
Local accounts on each device - e.g. a workgroup
Centralized account management for authentication and authorization - e.g. a
domain.

So it looks like you are stuck in a workgroup with lots of local accounts to
try and manage etc.
(This is why no one really uses workgroups where they want any degree of
security)

 

[Smithy963]

Thanks for your support, advice and peserverence.

I think I'll have to do as you suggest and then hide them from the welcome
screen.

Thanks again,

Shaun.

 

[Richard G. Harper]

Unfortunately, unless you are willing and able to move to a domain based
network model, that's what is going to have to happen. There is no way to
cause one computer to trust an account that is trusted on another, nor to
use an account from one PC to access information or data on another PC. A
domain based network can do this because it centralizes the security data
but you would need to run a server operating system on one computer and all
computers would need to be able to reach and log onto the domain.

 

[Mick Murphy]

Smithy, read below about Networking. I included XP as well.
In Vista's Network and Sharing, you can turn OFF password protected Sharing;
no extra user accounts to set up.

And ONLY allow Public folder Sharing, which is the same as XP's shared docs.
It is a network, so you all have to be going through the same router, wired
or wirelessly.
http://technet.microsoft.com/en-us/library/bb727037.aspx

Have a read of the above link re Vista File and Printer Sharing.

Permissions/Share info is there as well.

If using Norton, McAfee, Trend Micro I.S., make sure file and printer
sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
Exceptions are worded in their Firewall)

1st thing to do is make sure that the Workgroup Name of ALL the computers is
the SAME.

In Vista Network and Sharing:

Network Discovery: ON (So it can see the other computers)

Network set to Private (Public is for hotspots, airports, etc)

File Sharing: ON

Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
Docs)

Password Protected: OFF (unless you want to set up identical usernames and
passwords (passwords can be different) on ALL computers in your Network) If
you have it ON, you will be asked for a username and password when you try to
access a Vista computer from an XP computer, or a Vista computer.

Also, run the XP’s Home or Small Office Network File and Printer Sharing
Wizard to include Vista in your “New†Network, even if you had an XP Network
set up prior to adding a Vista computer to it(redoing the Wizard seems to
work for XP machines!).

In “My Network Placesâ€: “Set up a Home or Small Office Networkâ€
OR under Accessories > Communications > Network Setup Wizard > Allow File
and Printer Sharing.

 

[Bruce Chambers]

Ideally I would like him to click on my computer in the network then
automatically view my files under his own account name, or at least be able
to type in his own username and password. BUT I do not want to have another
account active on my own computer. (ie, 2 user accounts available on my log
in screen).

You two above stated desires are mutually exclusive. If you want your
friend to access your computer using his own login name and password,
then you'll have to create an account for him to do so.


--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot