Network sharing for only certain users - WinXP Pro

  • Thread starter Thread starter Brattex
  • Start date Start date
B

Brattex

Hi there

I seem to be experiencing problems with network sharing.

We have three users, on the following subnets;

146.230.34.184
146.230.34.192
146.230.92.xxx

I want to share a folder on the first xxx.xxx.34.192 machine which all
three can access.

1. I want to prevent members of USERS from accessing it, and only allow
ADMINISTRATORS to use it. Is there a way to set it up so, depending on
the user's membership level, they get different rights to the folder? A
Yes or No answer will suffice for now to this question, because I can
fiddle from there :)

2. I tried simple file sharing, with the firewall turned OFF, and I get
as far as it finding the directory if I type in:

\\146.230.34.192\PUBLIC

I expect that typing in \\146.230.34.192\ should prompt for a login and
then list the appropriately shared folders, but it doesn't...

So if I specify the \PUBLIC\ folder when connecting, it then prompts
for a user name and password. I type in the user name and password as
I've set it up under USERS in computer management. It then refreshes
the login box with the IP and user name, and prompts again for the
password. No number of attempts will resolve the box from just
refreshing.

I am faced with an IP and user name, but it won't ever accept the login
attempt.

user name: 146.230.34.192\user

Why doesn't it work?
I have definately set up the right user name "user", and right password
"test" but it just ignores the login attempts.

Once I've got the simple file-sharing done, I will move onto the
advanced features, which I'm pretty sure I can figure out; for now -
why is it prompting with an IP\user and how do I get it to login with
the credentials as specified on the host computer?

Is there a way to go \\146.230.34.92\ and then it lists all shared
directories according to the user name I typed in to get there?
Presently it doesn't resolve; only pointing directly to the sharename
of the folder will get a login prompt.

Help?
 
Hi there

I seem to be experiencing problems with network sharing.

We have three users, on the following subnets;

146.230.34.184
146.230.34.192
146.230.92.xxx
Click to expand...

Those are public IP addresses. Unless they were assigned to you by an
Internet authority, using them could block your access to some web
sites. It's better to use one of these private IP address ranges on a
LAN:

10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
I want to share a folder on the first xxx.xxx.34.192 machine which all
three can access.

1. I want to prevent members of USERS from accessing it, and only allow
ADMINISTRATORS to use it. Is there a way to set it up so, depending on
the user's membership level, they get different rights to the folder? A
Yes or No answer will suffice for now to this question, because I can
fiddle from there :)
Click to expand...

Yes.

You can specify access rights based on users and groups defined on the
server computer.
2. I tried simple file sharing, with the firewall turned OFF, and I get
as far as it finding the directory if I type in:

\\146.230.34.192\PUBLIC

I expect that typing in \\146.230.34.192\ should prompt for a login and
then list the appropriately shared folders, but it doesn't...

So if I specify the \PUBLIC\ folder when connecting, it then prompts
for a user name and password. I type in the user name and password as
I've set it up under USERS in computer management. It then refreshes
the login box with the IP and user name, and prompts again for the
password. No number of attempts will resolve the box from just
refreshing.

I am faced with an IP and user name, but it won't ever accept the login
attempt.

user name: 146.230.34.192\user

Why doesn't it work?
I have definately set up the right user name "user", and right password
"test" but it just ignores the login attempts.
Click to expand...

Simple file sharing can't do what you want. It allows all users on
all computers to access all shared folders. There's no distinction
between users or groups with simple file sharing enabled.

There shouldn't be a login prompt with simple file sharing enabled on
the server unless you explicitly create a network password for the
Guest account. If you do that, all access requests will be prompted
for that single password.

The Guest account settings in Control Panel > User Accounts have
nothing to do with networking. To create a network password for the
Guest account on the server:

1. Click Start > Run.
2. Type "control userpasswords2" in the box and click OK.
3. Click Guest.
4. Click Reset Password.
5. Enter a password and click OK.
Once I've got the simple file-sharing done, I will move onto the
advanced features, which I'm pretty sure I can figure out; for now -
why is it prompting with an IP\user and how do I get it to login with
the credentials as specified on the host computer?
Click to expand...

With simple file sharing disabled, a Windows XP server computer uses
its local user accounts and groups to validate access requests from
users on other computers:

1. When a client computer attempts to access a shared folder belonging
to a Windows XP server, the client sends the credentials (user name
and password) of the current logged-in user along with the request.

2. If the credentials match a user account that exists on the server,
the client is granted the type of access (e.g. none, read, full
control) defined for that user account or its user group in the shared
folder's permissions.

3. If the credentials don't match, the server causes the client to
prompt for different credentials. If the client runs Windows 95, 98,
or Me, there's no valid response to the prompt. If the client runs
Windows 2000 or XP, the user can specify a different user name and
password.
Is there a way to go \\146.230.34.92\ and then it lists all shared
directories according to the user name I typed in to get there?
Click to expand...

There's no way to display only the shares that a particular user name
is allowed to access.
Presently it doesn't resolve; only pointing directly to the sharename
of the folder will get a login prompt.

Help?
Click to expand...

Ron Lowe and I have written a web site that shows how to control
access based on user accounts and groups defined on the server
computer:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
I just wanted to thank Steve for taking the time to post this. It
saved me a TON of time and was a huge help. Google Groups is a life
saver because of people like you who take the time to post fixes. Once
I set my firewall settings and changed my guest password everything
worked perfectly.

I'm still new to Networking but I knew I could reply on Google Groups
like I do often and once again it answered the question and saved me a
ton of time!!

THANKS!!!!!!!!!!
 
Those are public IP addresses. Unless they were assigned to you by an
Internet authority, using them could block your access to some web
sites. It's better to use one of these private IP address ranges on a
LAN:

10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255


Yes.

You can specify access rights based on users and groups defined on the
server computer.


Simple file sharing can't do what you want. It allows all users on
all computers to access all shared folders. There's no distinction
between users or groups with simple file sharing enabled.

There shouldn't be a login prompt with simple file sharing enabled on
the server unless you explicitly create a network password for the
Guest account. If you do that, all access requests will be prompted
for that single password.

The Guest account settings in Control Panel > User Accounts have
nothing to do with networking. To create a network password for the
Guest account on the server:

1. Click Start > Run.
2. Type "control userpasswords2" in the box and click OK.
3. Click Guest.
4. Click Reset Password.
5. Enter a password and click OK.


With simple file sharing disabled, a Windows XP server computer uses
its local user accounts and groups to validate access requests from
users on other computers:

1. When a client computer attempts to access a shared folder belonging
to a Windows XP server, the client sends the credentials (user name
and password) of the current logged-in user along with the request.

2. If the credentials match a user account that exists on the server,
the client is granted the type of access (e.g. none, read, full
control) defined for that user account or its user group in the shared
folder's permissions.

3. If the credentials don't match, the server causes the client to
prompt for different credentials. If the client runs Windows 95, 98,
or Me, there's no valid response to the prompt. If the client runs
Windows 2000 or XP, the user can specify a different user name and
password.


There's no way to display only the shares that a particular user name
is allowed to access.


Ron Lowe and I have written a web site that shows how to control
access based on user accounts and groups defined on the server
computer:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
Click to expand...

I just wanted to thank Steve for taking the time to post this. It
saved me a TON of time and was a huge help. Google Groups is a life
saver because of people like you who take the time to post fixes. Once
I set my firewall settings and changed my guest password everything
worked perfectly.

I'm still new to Networking but I knew I could reply on Google Groups
like I do often and once again it answered the question and saved me a
ton of time!!

THANKS!!!!!!!!!![/QUOTE]

You're welcome, Jason! I'm glad that my earlier message helped you
solve the problem.

I read the original question and answered it in the news group called
"microsoft.public.windowsxp.network_web" on the Microsoft news server
"msnews.microsoft.com". Google Groups just copied the answer and made
it available.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Back
Top