Sharing & Security Question - WinXP Professional

[July Dereck]

Hi,

I have WinXP Pro. I have disabled Simple File sharing. I now can't
figure out :

When you Right-click the folder and get into "Sharing & Security",
what is the difference between the Tab "Security" and the
"Permissions" button under "Sharing Tab" ?

Thanks in advance.

 

[Andrew McLaren]

When you Right-click the folder and get into "Sharing & Security",

what is the difference between the Tab "Security" and the
"Permissions" button under "Sharing Tab" ?

The share Permissions button sets the security on the Share itself - an
object which lives in the Windows Server service. The Security tab sets
the NTFS permissions for the actual files and directories on the disk.
One is a server object; the other is an on-disk object.

To access a file from across the network, a user will need appropriate
permissions both to the Share (the thing they connect to by mapping a
drive, etc), *and* to the underlying disk objects (directories, files).

If a user has read/write access to a file in NTFS, but only Read
permissions on the share, they won't be able to write to the file from
across the network. They could however write to the file, if logged on
locally.

Make sense? Hope it helps,

Andrew

 

[Jason Derek]

Thanks. Something is going into my head. The Permissions are for
Network access and the Security tab settings are for local access. Is
that right ?

If I want to prevent someone from opening the shared folder from
across a network. Do I have to set permissions both in the
Permissions button & Sharing Tab ?

 

[Andrew McLaren]

Thanks. Something is going into my head. The Permissions are for
Network access and the Security tab settings are for local access. Is
that right ?

Yes ... kinda sorta. Share permissions control access from across the
network. The NTFS settings under Security control any access to the
files, whether it's across the network or local. In other words, if you
grant a User access to the share, but that User doesn't also have NTFS
permissions, then they cannot access the file (note tha most permissions
will be defined for Groups, such as "Users", rather than individual user
accounts).

If I want to prevent someone from opening the shared folder from
across a network. Do I have to set permissions both in the
Permissions button & Sharing Tab ?

The permissions on the Share will override any NTFS permissions, for
network access. For example, a user may have total access to a file, as
defined in the NTFS permissions (under the "Security" tab). But if the
Share permissions say that user only has Read access to the file, then
they can only read the file from across the network - even though they
could read and write to the file, if they were a local user. If the user
has total access under the NTFS permissions, but no access at all under
the Share permissions, then they cannot access the file at all from
across the network.

A few MSFT articles that may help:

How to configure file sharing in Windows XP
http://support.microsoft.com/kb/304040

How to disable simple file sharing and how to set permissions on a
shared folder in Windows XP
http://support.microsoft.com/kb/307874

How to Set Security in Windows XP Professional That Is Installed in a
Workgroup
http://support.microsoft.com/kb/290403

Cheers,
Andrew

 

[Jason Derek]

Thanks a lot. I really appreciate your help !

 

[Jason Derek]

I shared a folder in a WinXP Prof. PC. That share can be accessed by
WinXP PC's on the Network within the same workgroup but not by a WinXP
Home PC on the same workgroup. I get the message "...Sharing is not
accessible. You might not have permission to use this network
resource....".

In the Permissions of the Shared folder it is shared with "Everyone".

Any ideas ?

 

[Jason Derek]

Another weird thing happened. There is a sharing permission for
"Everyone" for that folder. I wanted to stop access to a login called
ABC and I included ABC in the permissions with a deny to access the
folder. Now even XYZ and BBB cannot access the folder.

Any ideas ?