Xp Home Administrator right giving access to Secure folders

[becface]

Hi and thank you in advance for any information you might provide.

I work in a small company with mostly XP Pro PCs but we do have XP Home
on about 4 PCs. My dilemma:

There are only two rights options for users, Administrator or Limited.
Limited is too limited but Administrator is too much. If a user is set
as a Computer Administrator he/she is able to get access to server
folders that should only be accessed by actual administrators. This
being the case, is there a way around this or do I need to actually go
in and Deny rights to those users using XP Home (what a pain but
do-able).

Also, I'm wondering if password access can be set for folders - for
example, if the Accounting Departments folder access is restricted one
user, Marsha, and Marsha is working at another PC under a different
login, is she required to log off and log back in as herself or can
that folder pop up with a password request that once entered correctly,
will allow her to access it?

I hope these questions aren't too basic for you all but I do appreciate
the time. I'm off now to finish setting up another XP Home PC for
network use via VPN - fun fun.

Thanks so much,
B

 

[Malke]

Hi and thank you in advance for any information you might provide.

I work in a small company with mostly XP Pro PCs but we do have XP
Home on about 4 PCs. My dilemma:

There are only two rights options for users, Administrator or Limited.
Limited is too limited but Administrator is too much. If a user is set
as a Computer Administrator he/she is able to get access to server
folders that should only be accessed by actual administrators. This
being the case, is there a way around this or do I need to actually go
in and Deny rights to those users using XP Home (what a pain but
do-able).

Also, I'm wondering if password access can be set for folders - for
example, if the Accounting Departments folder access is restricted one
user, Marsha, and Marsha is working at another PC under a different
login, is she required to log off and log back in as herself or can
that folder pop up with a password request that once entered
correctly, will allow her to access it?

I hope these questions aren't too basic for you all but I do
appreciate the time. I'm off now to finish setting up another XP Home
PC for network use via VPN - fun fun.

It would be better to use XP Pro and, if you have more than 7 or 8
computers, a server operating system.

If that isn't a possibility, look at running either MVP Doug Knox's
Security Console or the MS Shared Computer Toolkit on the XP Home
boxen.

http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

As for your second question regarding access:

[cut/paste]
XP does not use passwords to protect resources. It uses permissions
instead. Here is information to help you with that:

How to disable Simple Sharing and set permissions on a shared folder in
Windows XP (Pro only)
http://support.microsoft.com/?kbid=307874

HOW TO: Set, View, Change, or Remove File and Folder Permissions in
Windows XP
http://support.microsoft.com/?kbid=308418

By default in XP Home, you can only make files and folders under My
Documents "private". Otherwise, to see the security tab in WinXP Home,
restart in Safe mode and log on with an account that has administrator
privileges. To get into Safe Mode, repeatedly tap the F8 key as the
computer is starting up. This will get you to the menu where you can
choose Safe Mode.

Note that the file system must be NTFS, not FAT32.

Passwording of folders is not supported unless you zip them. When you do
(right click a folder, then "send to > compressed folder") and then open
the zip file, you will find an option under file>"add a password".
Otherwise, use third-party software. Google "password protect folders".
[end cut/paste]

Really in the situation you describe the best solution is to at least
use XP Pro, even if you do not set up a server.

Malke

 

[Guest]

Another important point is to disable Administrative Shares - they are the
main (though not the only) cause of your security issues.

Also, the local administrators should not have the same password as the
domain or server administrator.

 

[becface]

Wow, busy month and forgot to get back to this thread. I eventually got
it fixed but couldn't tell you how right now. I just wanted to take a
minute to thank you both for the advice. Can't remember what worked but
it had to be associated with the good karma you all sent my way.

Thanks again!!!
B