Sharing with Permission

[Sam]

Hi, I'm trying to follow this link but I don't
understand. When I share a folder and click Permissions
button I don't see the user for the other computer. I
click Add, then the Select Users, Computers, or Groups
dialog appears. I type MSHOME workgroup and click Ok.
Under the Group or user names box, I see my computer name
which is Sam. It appears like this: Sam\MSHOME.

Here's the link:
http://www.microsoft.com/windowsxp/pro/using/itpro/managin
g/filesharing.asp

How do I add the user for the other computer?

 

[Ron Lowe]

Hi, I'm trying to follow this link but I don't
understand. When I share a folder and click Permissions
button I don't see the user for the other computer. I
click Add, then the Select Users, Computers, or Groups
dialog appears. I type MSHOME workgroup and click Ok.
Under the Group or user names box, I see my computer name
which is Sam. It appears like this: Sam\MSHOME.

Here's the link:
http://www.microsoft.com/windowsxp/pro/using/itpro/managin
g/filesharing.asp

How do I add the user for the other computer?

You don't.
What you see is the correct behaviour.

In a workgroup ( as opposed to a Domain ), a computer can only reference
user accounts defined locally ( on itself ).

The work-around is to create matching user accounts on the local machine
which are the same as the user accounts on the remote machines where the
other users are logged in. ( same username and password ).

In otherwords, you need to maintain simultaneous user accounts for all users
on all machines to be able to grant access rights in a workgroup. After
the network expands beyond a few servers, this does not scale well and
maintaining these simultaneous accounts becomes an admin burden. That's
when you need to look at setting up a domain using windows server 2k3 or
similar. This permits the creation of a 'centralised' user account
database which all the machines can access.

When you have a domain, then in the loactions section, you can select
between local users or domain users.

 

[Sam]

Do I need to disable the Guest account?

Also, where do I create matching user names and
passwords? The Control Panel or Computer Management? I've
been told that going into the Control Panel only effects
users locally. Is this true?

 

[Sam]

Well, I'm not going that far. I'm not going to get
Windows 2003 Server. These are only a few XP Pro
machines. That's it.

Also, when I create identical user name and passwords,
can I give permission read and write to the user accounts
or will that not work?

 

[Ron Lowe]

Do I need to disable the Guest account?

If you are going to use proper access control,
ie with user accounts and setting share permissions
per user, then I would disable the guest account.

Also, where do I create matching user names and
passwords? The Control Panel or Computer Management? I've
been told that going into the Control Panel only effects
users locally. Is this true?

Not really.
You can create user accounts either place.

Note there are 2 different control panel user account tools.
I think which one you get by default depends if your machine is in a
workgroup or domain.

If I remember correctly, the default one you get in a workgroup
configuration is a fairly simple one. It's rather basic in the options
available.
This is a perfectly good place to create new user accounts.

You get a slightly different one if you go to:
start | run , and enter "control userpasswords2".
Note that the Add.. button does not create user accounts!
Confusingly enough.
It just adds existing users to existing groups.
Ignore this button.

To create new user accounts from here, go to:
Advanced tab, Advanced User Management -> Advanced button.
This will take you to the same options available in Computer Management.
Also, you can go here directly with:
start | run "lusrmgr.msc"

You can certainly create new user accounts here, and it offers the full
range of options, but it's not necessary.
The simple control panel tool works just fine.

Have a read through this article, I step through this in some detail here..
http://www.practicallynetworked.com/sharing/xp_filesharing/

In particular:
http://www.practicallynetworked.com/sharing/xp_filesharing/02createusers.htm

 

[Sam]

Ron,

I created an account and added it to the Select Users,
Computers, and Groups when sharing a folder and it
appears just like before. My computer name is Sam. It is
looking like this: Sam\<computer user>. I just disabled
the Guest account.

Any ideas?

 

[Sam]

This link says not to disable the Guest account.

http://www.jsifaq.com/SUBJ/TIP4800/rh4894.htm

I thought it needed to be disabled. I'm confused.

 

[Ron Lowe]

I created an account and added it to the Select Users,
That seems OK.


The guest account must be enabled for simple file sharing to work.
It would normally be disabled if you are not using simple file sharing,
ie you are setting up user accounts and so forth.

You need to set up identical accounts on both machines, ie <uesrname> and
<password>.

Then, on Sam, share the folder with permissions for <username>.
That is to say: Sam\username, since in a workgroup, you can only use local
accounts.
If that's what you see, then then it's OK.

Then log onto the other machine ALSO as <uesrname>, with the same
<password>.
( we set up the same user accounts on both machines, remember? )

Technically speaking, you are now Other-machine\username.
But that doesnt matter.
When you reach out to connect to Sam, the Other-machine will offer up the
<username> and <password> which it has, and since they are the same on Sam,
it will allow the incoming connection.