workgroup permissions

[AMD]

Installed a wireless router on a workgroup only network.
Everything works well with simple sharing 'on', however
with wireless access which we want others to access the
internet but not the workgroup,
Two WS's with XPpro. one has ntfs and one has fat32. Both
ws's have same user names and passwords, ie. bob/go and
sally/bye... set shares to 'not simple' sharing so both
have permissions that can be set on drive and folders.
Set permissions to access with full control,on Drv-C to
bob and sally on the ntfs drv, but still cannot access
Drv-c from the fat32 system. Also I took off 'Everyone'
off access permissions on both systems. Able to
access 'My documents' and 'shared folder' but not Drv-c.
Also set permissions in the property/security tab to bob
and sally also... It seems like it should work.. Any
suggestions as to what I am missing or overlooking?
Thanks, AMD mcse ccna

 

[Steve Winograd [MVP]]

Installed a wireless router on a workgroup only network.
Everything works well with simple sharing 'on', however
with wireless access which we want others to access the
internet but not the workgroup,
Two WS's with XPpro. one has ntfs and one has fat32. Both
ws's have same user names and passwords, ie. bob/go and
sally/bye... set shares to 'not simple' sharing so both
have permissions that can be set on drive and folders.
Set permissions to access with full control,on Drv-C to
bob and sally on the ntfs drv, but still cannot access
Drv-c from the fat32 system. Also I took off 'Everyone'
off access permissions on both systems. Able to
access 'My documents' and 'shared folder' but not Drv-c.
Also set permissions in the property/security tab to bob
and sally also... It seems like it should work.. Any
suggestions as to what I am missing or overlooking?
Thanks, AMD mcse ccna

Permissions can only be set on NTFS drives, not on FAT32 drives.

See this web site for full details of setting NTFS permissions:

Windows XP Professional File Sharing
http://www.practicallynetworked.com/sharing/xp_filesharing/index.htm
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[David Dickinson]

NEVER SHARE THE ROOT OF A DRIVE.

(Capitalization intentional.)

Is the "Drv-C" that you are trying to access from the Fat32 system on the
Fat32 system? (I'm confused by the description of your configuration. A
more thorough description will help.)

Take a look at the local security policy, particulary with regard to "Access
this computer from the network" and "Deny access from the network". NTFS
and Sharing permissions are not the only things you should configure if you
want people who connect to the LAN to stay out of your machines. (Also, I
hope that "go" and "bye" aren't the actual passwords. I figure that I'm not
doing my job if people aren't pissed off with the password policy that I
require.)

David Dickinson
eveningstar at mvps dot org

 

[AMD]

That is what I have always been taught; But why do
permissions appear when you uncheck the 'simple-sharing'
option in folder options on a fat32 partition?
I don't mean to be contrary, but there it is bigger than
life on the screen.... Thanks, AMD. mcse ccna

-----Original Message-----

 

[AMD]

Sharing the root drive is not forbidden although I
understand it is not recomended. In this instance,
between these two users, security is not an issue only
from out-side the workgroup is there a risk. And, from
the fat32 system am I trying to access the drv-c root on
the ntfs partition. Also the 'go and bye ' are an example
of passwords. Is there any reason in the default settings
of local security policy I would not be able to access
the the drv-c on the ntfs partition from the fat32
partition? After one takes the 'everyone' group from the
access list, simply putting the user of ws2 on ws1 and
giving them full control should give them access? yes or
no?
sincerely, AMD. mcse ccna

 

[David Dickinson]

But why do permissions appear when you uncheck the 'simple-sharing'

option in folder options on a fat32 partition?

File sharing permissions are different from NTFS permissions. You can set
permissions for who can access folders and files via the network on an NTFS
/or/ on a FAT/FAT32 partition. NTFS permissions, on the other hand, affect
who can access files and folders both locally and via the network. Let's
say that you have an NTFS partition and are sharing the folder "My Network
Share" with user Alfred -- and only user Alfred -- on the LAN. Alfred would
have to be set up as a User and have permission to access the folder in both
Sharing and NTFS. If you give Alfred permission to access My Network Share
only in Sharing but he is not a member of a group that has NTFS permission
to access the folder locally, then attempts to access the folder from the
network would fail. (However, by default -- and most unfortunately --
Everyone is given NTFS permissions to access most folders, and that would
include Alfred.)

On a FAT32 partition, on the other hand, Alfred would have to have
permission to access My Network Share only in Sharing.

 

[David Dickinson]

If the same User ID has an account on both machines, then your scenario
should work. However, make sure that that User ID has permission to access
the share in /both/ Sharing and NTFS security settings.

Some virii look specifically for root shares. There are other risks, as
well. "Forbidden" is irrelevant. The safe thing to do is to share only
what you need to share. Any computer that is connects to the internet
(especially if you sometimes use floppy disks or CDs that have been in other
computers or if it connects to other computers on a LAN) is at risk, and a
root share only makes vandalism easier.