two networked computers / one xp home other xp pro (media center edtion)

  • Thread starter Thread starter *Prot3anThr3ad*
  • Start date Start date
P

*Prot3anThr3ad*

ok i got my network up and running my primary computer (xpme) can see
the secondary computer (xphe) including directories, however, there are
certain directories (such as a games folder in root) that xpme says i
do not have permission to access when in fact i went to the xphe
machine and shared the entire drive (or at least i thought i did)
giving full control to all users on the network (or at least i thought
i did).

what am i doing wrong?
 
*Prot3anThr3ad* said:
ok i got my network up and running my primary computer (xpme) can see
the secondary computer (xphe) including directories, however, there
are certain directories (such as a games folder in root) that xpme
says i do not have permission to access when in fact i went to the
xphe machine and shared the entire drive (or at least i thought i did)
giving full control to all users on the network (or at least i thought
i did).

what am i doing wrong?

If one or more of the computers is XP Pro or Media Center:

a. If you need Pro's ability to set fine-grained permissions, turn off
Simple File Sharing (Folder Options>View tab) and create identical user
accounts/passwords on all computers.

b. If you don't care about using Pro's advanced features, leave the
Simple File Sharing enabled.

Simple File Sharing means that Guest (network) is enabled. This means
that anyone without a user account on the target system can use its
resources. This is a security hole but only you can decide if it
matters in your situation.

Then create shares as desired. XP Home does not permit sharing of users'
home directories (My Documents) or Program Files, but you can share
folders inside those directories. A better choice is to simply use the
Shared Documents folder.

Malke
 
one computer is xpMe and the other is xpHe. i want to access the
entire drive(s) on xpHe using xpMe. is there a way to do that?
 
*Prot3anThr3ad* said:
one computer is xpMe and the other is xpHe. i want to access the
entire drive(s) on xpHe using xpMe. is there a way to do that?

Not with any supported way. There is a complicated unsupported and
possibly destructive way, but why do you want to do this? There is no
reason to share the whole drive and lots of good reasons *not* to share
the whole drive since it includes Program Files and the Windows
directory. If you want to mess up your machine, it's your perogative so
here are my notes about disabling Simple Sharing on XP Home. Please
note that I've never done this because I think it's a stupid thing to
do, but it's your choice. You have been warned.

A. from MVP Doug Knox -
http://www.microsoft.com/ntserver/nts/downloads/recommended/scm/default.asp

Instructions: Download the x86 (Intel) version of the Security
Configuration Manager and save it to your hard disk. Double click the
SCESP4I.EXE file you downloaded and extract the contents to a temporary
location on your hard disk. Then open the folder you extracted the
files to and locate the Setup.inf (Setup Information) file. Right
click Setup.inf and select Install. After the installation is
finished, reboot your computer.

If the download link on the page, listed above, does not work, try this
one - ftp://ftp.microsoft.com/bussys/winnt/winnt-public/tools/SCM

Right click the SCESP4I.EXE file and select Copy to Folder). Make sure
to read the README files!!!!

B. Use CACLS, per Ron Lowe:

DISCLAIMER: Quote from MVP Steve Winograd, "I have tested this
procedure on my XP Home installation, and it works. I cannot guarantee
that it will work on your system. Make sure you create a System
Restore point before proceeding. WARNING: Adjusting the permissions on
a drive, file or folder can lock even the Administrator account out of
that drive/file/folder. Deny Permissions take precedence over Allow
Permissions, regardless of your group membership. Administrators are
members of the User's group, by default. Uncheck Allow, rather than
using Deny."

XP home is tricky for 2 reasons:

1) You cannot disable Simple File Sharing - so you cannot access the
Security tab;
2) You cannot disable Simple File Sharing - so all incoming connections
authenticate as Guest. We can't do anything about (2), but we can work
around (1) to that Guest has the same permissions as other folders.
There are 2 ways to do it:

1) Boot to safe mode and manipulate the folder permissions there ( Add
the 'Everyone' group );or
2) Go to a command prompt. Change Directory to the parent of the target
folder. Use the CALCS command to change the folder permissions.

We will go to a command prompt window, and use the CACLS command. In
this example, I'm making my profile directory (C:\Docs+Setts\Ron )
accessible across the network:

# First, notice that the command prompt window has opened
# with the profile directory I wish to edit as my current working
# directory ( C:\Docs+Sets\Ron ). I'm going to move up one level,
# to C:\Docs+Sets so the Ron directory is visible to me.
C:\Documents and Settings\Ron>cd ..
# Can I see the directory I want to edit?
# Let's try the DIR command and see...
C:\Documents and Settings>dir
Volume in drive C has no label.
Volume Serial Number is C4C5-AAB4
Directory of C:\Documents and Settings
12/06/2005 14:06 <DIR> .
12/06/2005 14:06 <DIR> ..
12/06/2005 13:45 <DIR> All Users
12/06/2005 14:06 <DIR> Ron
0 File(s) 0 bytes
4 Dir(s) 15,526,223,872 bytes free
# Ah, yes, there it is.
# Let's look at the existing permissions:
C:\Documents and Settings>cacls ron
C:\Documents and Settings\Ron BUILTIN\Administrators:(OI)(CI)F
XP-HOME-VPC\Ron:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
# Now, add the Everyone group, which includes Guest:
# the last 'C' means I'm granting read/write access to everyone
# including the Guest account across the network.
# Replace the 'C' with 'R' for read-only ( eg backing up ).
C:\Documents and Settings>cacls ron /E /G Everyone:C
processed dir: C:\Documents and Settings\Ron
#Now, lets look at the permissions again:
C:\Documents and Settings>cacls ron
C:\Documents and Settings\Ron BUILTIN\Administrators:(OI)(CI)F
XP-HOME-VPC\Ron:(OI)(CI)F
NT AUTHORITY\SYSTEM:(OI)(CI)F
Everyone:(OI)(CI)C
# Now the folder is accessible across the network.
# All the contents of the folder are too, because they
# inherit the parent folder's permissions.
# This works with the Program Files folder too.
C:\Documents and Settings>cd ..
C:\>cacls "program files" /E /G Everyone:C
processed dir: C:\Program Files
C:\>cacls "program files"
C:\Program Files BUILTIN\Administrators:(OI)(CI)F
CREATOR OWNER:(OI)(CI)(IO)F
Everyone:(OI)(CI)C
NT AUTHORITY\SYSTEM:(OI)(CI)F
BUILTIN\Users:(OI)(CI)R
# This is now accessible across the network too.

C. Boot into Safe Mode with Networking, which temporarily disables
Simple File Sharing. Shared the desired folder(s), set permissions,
reboot normally.

Malke
 
Malke said:
Not with any supported way. There is a complicated unsupported and
possibly destructive way, but why do you want to do this? There is no
reason to share the whole drive and lots of good reasons *not* to share
the whole drive since it includes Program Files and the Windows
directory. If you want to mess up your machine, it's your perogative so
here are my notes about disabling Simple Sharing on XP Home. Please
note that I've never done this because I think it's a stupid thing to
do, but it's your choice. You have been warned.

Malke
---


The reason I want to share the *WHOLE* drive is to copy it / back it up
so that it can be reformatted (i think its about to go out).
 
*Prot3anThr3ad* said:
The reason I want to share the *WHOLE* drive is to copy it / back it
up so that it can be reformatted (i think its about to go out).

Then image it instead of fscking around with the sharing. Get yourself
Acronis True Image or BootIT NG and an external hard drive.

Malke
 
Back
Top