Workgroup names & sharing stuff

[Doug]

I have about 9 PC's all running XP pro all sharing a network connection
through a Linksys BEFSR41 Router & EZXS88W switch. (Basically to share the
internet) But, I do have several of them in workgroups to share printers
rather than files. In fact, I would prefer NO file sharing at all. But, here
is the issue.

Lets say I have two distinctly different groups of people. (workgroups) For
the sake of argument, one will be named "MARINE" and the other "YARD"

The group named MARINE is supposed to share two printers one laserjet is
connected to PC#1, and the Inkjet to PC#2. They seem to be fine doing this.
I would like to isolate that group from all the other PC's on the network.

The group named YARD shares two printers as well. Similar situation to the
MARINE group. BUT....................

I don't want them to see each other on the network or share any printers,
more importantly FILES. I thought by naming the workgroups differently this
would solve this issue.

I have not enabled specific file sharing on any PC. Just printers. Can I
totally prevent one group from seeing the other? Sharing files? Printers? Is
it a router setting?

Thanks!

Doug

 

[Guest]

Are all 9 workstation on the same subnet?
I don't think your router supports subnetting. You need some way to subnet
your network into at least 2 subnets. Then you can block one subnet not to
see another by not providing gateway or forward packets.

 

[Doug]

I think you are right. Even though they are two totally different named
Workgroups, how can they see each other? I thought by naming them in
different workgroup names I could "hide" them from each other.

 

[Malke]

I think you are right. Even though they are two totally different
named Workgroups, how can they see each other? I thought by naming
them in different workgroup names I could "hide" them from each other.

Workgroups provide no security. Think of them rather as just a way of
identifying a group of computers. What you might also try is making
different user groups (since you have XP Pro). Call then something like
"Marine" and "Yard". Give only the users for each permissions to print
to the printers of your choice. Don't forget to allow
yourself/Administrator permission to print to those printers also!

Malke

 

[Steve Winograd [MVP]]

I have about 9 PC's all running XP pro all sharing a network connection
through a Linksys BEFSR41 Router & EZXS88W switch. (Basically to share the
internet) But, I do have several of them in workgroups to share printers
rather than files. In fact, I would prefer NO file sharing at all. But, here
is the issue.

Lets say I have two distinctly different groups of people. (workgroups) For
the sake of argument, one will be named "MARINE" and the other "YARD"

The group named MARINE is supposed to share two printers one laserjet is
connected to PC#1, and the Inkjet to PC#2. They seem to be fine doing this.
I would like to isolate that group from all the other PC's on the network.

The group named YARD shares two printers as well. Similar situation to the
MARINE group. BUT....................

I don't want them to see each other on the network or share any printers,
more importantly FILES. I thought by naming the workgroups differently this
would solve this issue.

I have not enabled specific file sharing on any PC. Just printers. Can I
totally prevent one group from seeing the other? Sharing files? Printers? Is
it a router setting?

Thanks!

Doug

As you've discovered, and as Malke noted in her reply, workgroups
don't provide any type of security or access control. A computer in
any workgroup can access a computer in any other workgroup. That's
the way it's always been in Windows networks.

One solution is to create user groups and permissions, as Malke
suggested. Ron Lowe and I have written a web page that should help to
explain the process:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm

Here's a hardware-only solution that doesn't require making any
configuration changes on the computers:

1. Get two more broadband routers. They're often available for less
than $20 at computer and office supply stores.

2. Connect the MARINE computers to one new router, and connect the
YARD computers to the other new router.

3. Connect the WAN (Internet) port of each new router to a LAN port of
the Linksys router.

4. Make sure that the new routers use a different TCP/IP subnet than
the old one. For example, if the old router uses 192.168.1.x, use
192.168.0.x on the new ones.

The two groups of computers will be completely isolated from each
other, and all of the computers will have Internet access.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com