SOHO file security

[Paul King]

I'm running a SOHO of 5 computers. 4 run WinXP Pro and 1 runs Win98SP2.
I need to be able to retrieve files (from my own accounts on these PCs) but
not allow other users to see those files or have any access to them.

It appears that I can achieve this on the Win98 PC because it allows
filesharing by AccessType/Depends on Password - but, although I can
fileshare, and allow *ALL* to see the files, I cannot find a similar setting
on the Win Xp Pro machines to allow only me to see/use/copy/delete them.

All pointers appreciated

 

[Kent W. England [MVP]]

I'm running a SOHO of 5 computers. 4 run WinXP Pro and 1 runs Win98SP2.
I need to be able to retrieve files (from my own accounts on these PCs) but
not allow other users to see those files or have any access to them.

It appears that I can achieve this on the Win98 PC because it allows
filesharing by AccessType/Depends on Password - but, although I can
fileshare, and allow *ALL* to see the files, I cannot find a similar setting
on the Win Xp Pro machines to allow only me to see/use/copy/delete them.

All pointers appreciated

If you have matching accounts on all four WinXP Pro machines, then turn
off simple file sharing, share a folder and set the local permissions to
allow access only from your account. Then when you are logged onto
another machine using the same username and password, you can access the
shared folder on the other machine.

This works so long as both machines have the same usernames setup. If
this is too complicated, simple file sharing authenticates remote users
as "guest" and grants them Guests privileges.

 

[Roger Abell]

This is one of those places where first impressions are
disceptive. The Win9x box that seems to secure things
is in fact wide open. The Win XP Pro boxes are in fact
protecting things.
On each XP that is to share out, change to not use simple
sharing mode (base of view tab in Folder Options). Then
on the shares, make sure that the account that should have
access in listed in the permissions (button of same name
on the Share tab in properties of what is shared out), and
that no account (or group that contains accounts that should
not have access) is listed there. I assume that the NTFS
permissions already grant access to the account(s) that
should have access.
Now, from a remote machine when attempting to access
the share you should get a prompt for credentials.
If you do not like the prompt, the as Kent stated, define an
account that is the same in name and password on the
sharing out box and the accessing box, grant the account
the accesses mentioned above, and use this account.

 

[Paul King]

Thanks guys... I understand most of that. Just one point...

I assume that the NTFS
permissions already grant access to the account(s) that
should have access.

How do I check/change this?

Thanks

 

[Paul King]

Thanks guys... all sorted now!

Thanks again for your help

 

[Roger Abell]

great - sorry I did not pass by in time for your follow-up,
but it looks like you found the info . . .