?? Net Security, User has to be prompted before connecting ??

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Ill give an example to explain the situation i am facing.
Computers A,B,C (all running Win XP Professional):
1- are on the same network
2- connected to a switch which in turn is connected to router for DSL purposes
3- 'A' works as a backup/archive computer, users of B & C backup their files
on 'A'
4- 'A' has user Mike (local administrator priviliges)
5- 'B' has user Jane (local user priviliges)
6- 'C' has use Kane (local administrator priviliges)
-------
Currently after setting everything up, the situation is:
1- everybody is connected to the internet
2- all computers see each other under the workgroup
3- File and Printer sharing is running

My problem is the following:
the user of any computer can connect to any of the other two computers
without authentication. as in, As in, any user on his/her computer after
searching and finding some other computer can simply just double click on the
icon and "viola" !

BUT that is not what i am looking for, i want that if Kane sitting on C
tries to connect to B, he should be prompted by a local Username/password for
B.
In addition to that, I want Kane to only be able to access Kane's "archive"
folder (which is located on A) and not Jane's "archive" folder which is also
located on A.

The reason is, I want to limit access of different users on the different
computers to mapped drives, i dont want anybody being able to connect to
anybody else's computer.

Bottom line, How do i get Windows to prompt anyone connecting over the
network with a Username/password prompt for verification

Is this possible ? plz !
thanks in advance
 
I just want to add that .. activating the guest accont didnt solve the
situation

Thanks again
 
I just want to add that .. activating the guest accont didnt solve the
situation

Thanks again
Click to expand...

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With Advanced File Sharing (SFS disabled) on computer A, and Classic
authentication, you can permission each individual user archive for that user.

To make this work, you have to setup matching accounts on A, and B or C. If you
setup Jane's accounts on computers A and B, Jane will be able to access her
archives on computer A from computer B.

If you assign identical, non-blank passwords to Jane's accounts on computers A
and B, Jane will be able to access her archives on computer A from her session
on computer B, without entering a password (except when she logs onto computer
B). If the password setup for Jane on computer A does NOT match the password on
computer B, she will have to enter the correct password whenever connecting to
computer A.

If you setup Kane's account on computer C with administrative privileges, Kane
will have administrative access on that computer. If you setup Kane's account
on computer A with administrative privileges, Kane will have administrative
access to computer A, and be able to open Jane's archive. If you setup Kane's
account on computer A with user privileges, Jane's archives will not be
accessible to Kane.

Mike, if his account is setup with administrative privileges there, since he
will be logged onto computer A directly, will have access to everybody's
archives.

Is this the right combination of abilities and restrictions?

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
 
Back
Top