Windows XP Advanced Filesharing

[Guest]

Hi,

i'd like to ask for a solution for a certain annoyance i encountered.

Let's say i got 2 PC's in one workgroup where i want to share files between
them.
PC1 has 2 shares: Storage and All
"All" is accessible only to user joe and share is availlable to "Everyone".
PC1 and PC2 have the same local user (joe) who uses the same password. So
when joe wants to access a share on PC1
from PC2 because user/pass match on both machines he doesn't get the
user/pass box and can access share "Storage" right away ...

But let's say ... user steve logs on locally on PC2 and now wants to access
"Storage" on PC1 but with joe's username and password. He tries to access PC1
but surprisingly he too doesn't get
user/pass box. He sees the shares but can't access "Storage" and can access
"All". Why... well he logged in as Guest (on both
PC1 and PC2 guest account is enabled). User steve on PC2 doesn't have any
matching username on PC1 and since guest accs are enabled
he logs in as Guest and that's it ...
If Guest accounts are disabled then user steve gets that user/pass box and
can log in on PC1 with joe's username and password.
But without Guest accounts there are no shares that can be accessed by
everyone.
So the only solution that i see is that that user/pass box HAS to appear
everytime. Or at least... there must be a way to log in on the remote machine
as a different user that is logged on the local machine.
i tried \\username@machine\share in a way FTP accepts user/pass but doesn't
work... or there is some combination ?
i hope i explained the issue so that u get the right picture

perhaps u know some reasonable solution

thank you in advanced

 

[Guest]

There's not a not of granularity within a workgroup

not sure i understand u there

can u please rephrase ?

 

[Chuck]

Hi,

i'd like to ask for a solution for a certain annoyance i encountered.

Let's say i got 2 PC's in one workgroup where i want to share files between
them.
PC1 has 2 shares: Storage and All
"All" is accessible only to user joe and share is availlable to "Everyone".
PC1 and PC2 have the same local user (joe) who uses the same password. So
when joe wants to access a share on PC1
from PC2 because user/pass match on both machines he doesn't get the
user/pass box and can access share "Storage" right away ...

But let's say ... user steve logs on locally on PC2 and now wants to access
"Storage" on PC1 but with joe's username and password. He tries to access PC1
but surprisingly he too doesn't get
user/pass box. He sees the shares but can't access "Storage" and can access
"All". Why... well he logged in as Guest (on both
PC1 and PC2 guest account is enabled). User steve on PC2 doesn't have any
matching username on PC1 and since guest accs are enabled
he logs in as Guest and that's it ...
If Guest accounts are disabled then user steve gets that user/pass box and
can log in on PC1 with joe's username and password.
But without Guest accounts there are no shares that can be accessed by
everyone.
So the only solution that i see is that that user/pass box HAS to appear
everytime. Or at least... there must be a way to log in on the remote machine
as a different user that is logged on the local machine.
i tried \\username@machine\share in a way FTP accepts user/pass but doesn't
work... or there is some combination ?
i hope i explained the issue so that u get the right picture

perhaps u know some reasonable solution

You're asking a very interesting question.

There's not a not of granularity within a workgroup - if you use Guest for
network access on one computer, you'll probably end up using it on all
computers. Likewise the password issue - you'll have to make the password
equal, for each account on each computer.

To make this easier to understand, please go back to each computer, and describe
NETWORK access activation. Look at what accounts are setup for network access,
and what accounts are currently successfully used, on each computer, and
inventory each in your reply. Please be as consistent as possible, so we don't
have to play guessing games.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate
<http://nitecruzr.blogspot.com/2005/06/background-information-useful-in.html>
http://nitecruzr.blogspot.com/2005/06/background-information-useful-in.html

 

[Guest]

exactly that:

3. If automatic non-Guest authentication is not possible, the server is
checked for the Guest account having been activated for network access.
4. If neither automatic non-Guest, nor Guest, access is possible, you will
have to supply the token manually. You will have to login to the server,
interactively, using an activated non-Guest account, with correct password.


i need that 4/5 scenrio (4 3/4 like in harry potter ;D)
since i want that non_guest and guest access is possible...
i need a scenario where when non_guest auth isn't possible (scenario 3) that
i can get to to supply the token manually (overriding the automatic supply of
the guest acc token)
actually if i could set that i always have to supply token manually.. that
would be the best solution

can that be done?

 

[Chuck]

not sure i understand u there

can u please rephrase ?

Be consistent how you setup authentication on each computer. You need to read
about authentication scenarios, then think carefully about how different people,
on different client computers, would authenticate on each server computer.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#NonGuest>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#NonGuest

 

[Guest]

Setup a different local account on each computer, with non-blank password.
Disable that account for local access, and Enable it for network access.
Disable all other accounts, including Guest, for network access.

If the network access non-Guest account isn't on the client computer, there will
be no caching of the token. If that account can't be used locally, there will
be no password match / mismatch before the network connection is attempted.
You'll have to enter the account / password each time.

yea.. i knew i could do that ut that's just way too much work so that i can
access my shares from some 3rd person's pc who came on my network for a short
time ...

 

[Chuck]

exactly that:

3. If automatic non-Guest authentication is not possible, the server is
checked for the Guest account having been activated for network access.
4. If neither automatic non-Guest, nor Guest, access is possible, you will
have to supply the token manually. You will have to login to the server,
interactively, using an activated non-Guest account, with correct password.


i need that 4/5 scenrio (4 3/4 like in harry potter ;D)
since i want that non_guest and guest access is possible...
i need a scenario where when non_guest auth isn't possible (scenario 3) that
i can get to to supply the token manually (overriding the automatic supply of
the guest acc token)
actually if i could set that i always have to supply token manually.. that
would be the best solution

can that be done?

Sure.

Setup a different local account on each computer, with non-blank password.
Disable that account for local access, and Enable it for network access.
Disable all other accounts, including Guest, for network access.

If the network access non-Guest account isn't on the client computer, there will
be no caching of the token. If that account can't be used locally, there will
be no password match / mismatch before the network connection is attempted.
You'll have to enter the account / password each time.

 

[Harry Boyne]

Why don't you save the user & pass on the computer that wants to connect to
the other computer:

1. Go to control panel
2. Go to User Accounts
3. Click your User Account
4. Click Manage my network passwords and click add.
5. Under server, type the computer name you want to connect to.
6. Under User name, type \\*1st_PC's_NAME*\joe. (If that doesn't work, edit
it to joe without the PC name)
7. Under Password, type the password
8. Open the share and see what happens

Let me know what happens
Harry

 

[Chuck]

yea.. i knew i could do that ut that's just way too much work so that i can
access my shares from some 3rd person's pc who came on my network for a short
time ...

Yes, maintaining a workgroup with more than 3 or 4 computers is a lot of work,
and that's why domains are useful.
<http://nitecruzr.blogspot.com/2005/08/setting-up-domain-or-workgroup-plan.html>
http://nitecruzr.blogspot.com/2005/08/setting-up-domain-or-workgroup-plan.html

That may be less time than you think. Probably not much more time than we are
spending discussing this over and over.

You might look at Network Magic. I haven't tried it, but a few folks here claim
that it simplifies some issues running a workgroup, with multiple computer
management similar to a domain.
<http://www.networkmagic.com/product/>
http://www.networkmagic.com/product/

 

[Guest]

Why don't you save the user & pass on the computer that wants to connect to
the other computer:

1. Go to control panel
2. Go to User Accounts
3. Click your User Account
4. Click Manage my network passwords and click add.
5. Under server, type the computer name you want to connect to.
6. Under User name, type \\*1st_PC's_NAME*\joe. (If that doesn't work, edit
it to joe without the PC name)
7. Under Password, type the password
8. Open the share and see what happens

Let me know what happens
Harry

in fact .... i tried that option before ... didn't work...

tho i tried it again upon suggestion again... a bit more.. persistent ...
i logged off tho it still didn't accept the entry in managed passwords ...

then i .. RESTARTED the damn machine... and it really did work !

so well... now i configured things like i want it ...
if i need to access my shares from some 3rd person's PC in my LAN... then i
generally have (if the 3rd user has guest enabled) only guest access upon
automated token supply.. BUT then i enter in managed passwords the account i
wish to access my shares...

logoff/reboot and voilá