Pivert said:
Hi,
I want to share my printer with all users that are connected in our home
network.
I want it to be allways, without having to type any username / password when
accessing the printer.
Using XP SP1 Pro.
Have tried to set the printer's security to have "invited" users to have
access to printer config and printing, but when I try to use the printer
from the other PCs I get a message that printer is not ready, or not
connected.
Also, after having set up my printers on my side, I see them on the other PC
as "Auto"space"name of my printer" .
Any help greatly appreciated !
Phil
I have this working on my home network with two xp pros and a win98se.
The first thing I did was work at it until I could see all three
computers/names
in Network Places-->view computers in workgroup. Or if win98, you can
see all the computers under network neighborhood.
Then I shared the printer on the computer that the printer was connected to
and gave it a share name. right-click, choose sharing, and name it.
Then I ran the add printer wizard using the network path of
\\computername\printername like \\Good\hpdeskje
You need to add the printer on each computer in the workgroup.
So maybe this will work at this point of configuration.
-------------------------------------------------------------------
I never had the problem of needing to logon to the printer so
maybe this will work. I had done some reading and took some
precautions. I added users (in control panel) for each of my
other computers on the 'win xp pro with printer connected machine'.
I went to My Computer, clicked on my C: drive and the clicked
on Tools--->Folder Options--->View--->Advanced Settings
and the last item is "use simple file sharing (recommended)"
and I unchecked that box. This lets you give some permissions.
Under My Computer, right-click, Sharing and Security,
New Share, Permissions, I enabled "change" and "read" boxes.
With the printer I right-clicked, sharing--->security
There is a list of groups or users
Select "Everyone" and enable print. There are a couple
of other options for setting the permissions for Everyone:
manage documents and manage printers.
So try the method above the dotted line first.
The reason I took these over zealous precautions (maybe not needed)
was due to this article pointed out by Johannes Helmig :
http://www.microsoft.com/technet/tr...winxppro/reskit/prork_overview.asp?frame=true
a.. Permissions for installing printers. In order to install a local printer
in Windows XP Professional, you must belong to the Power Users or
Administrators group and have the Load/Unload Device Driver privilege.
Administrators have this privilege by default, but it must be granted to
Power Users.
Simple Sharing and ForceGuest
When a Windows XP Professional-based computer is not joined to a domain, the
simple sharing model is fundamentally different than the model used in
previous versions of Windows. By default, all users logging on to such
computers over the network are forced to use the Guest account; this is
called ForceGuest.
How ForceGuest Works
On computers running Windows 95 and Windows 98 you can specify read-only and
full-control share passwords: any user connecting to a share can enter the
appropriate password and get the specified level of access. However, this
share-level password model is insecure, because share passwords are passed
in plaintext and can be intercepted by someone with physical access to the
network.
On computers running Windows 2000 and not joined to a domain, identical user
accounts with matching passwords must be created on two computers (to enable
transparent sharing) or the user must type a user name and password when
connecting. Windows 2000 also requires that you grant permissions to the
user account on the computer hosting a share to the share and to the files
and directories being shared or that you enable the Guest account. However,
using the Guest account can cause broader than intended access to the share,
because the Everyone group (which allows Guest access) is widely used in the
default system permissions.
By default, on computers running Windows XP Professional and not joined to a
domain, all incoming network connections are forced to use the Guest
account. This means that an incoming connection, even if a user name and
password is provided, has only Guest-level access to the share. Because of
this, either the Guest user account or the Everyone group (the only group to
which the Guest account belongs) must have permissions on the share and on
the directories and files that are shared. It also means that, in contrast
to Windows 2000, you do not need to configure matching user accounts on
computers to share files. Because Windows XP Professional supports Anonymous
connections, and because it severely limits the use of the Everyone group in
file system permissions, granting the Everyone group access to shared
folders does not present the security problem that it does on Windows
2000-based computers.
ForceGuest is enabled by default, but can be disabled on Windows XP
Professional by disabling the local security policy Network Access: Force
Network Logons using Local Accounts to Authenticate as Guest. By contrast,
on Windows XP Professional-based computers joined to a domain, the default
sharing and security settings are the same as in Windows 2000. Likewise, if
the ForceGuest policy setting on a Windows XP Professional-based computer
not joined to a domain is disabled, then the computer behaves as in Windows
2000.
Sharing Files and Folders Using the Simple Sharing User Interface
To simplify configuring sharing and to reduce the possibility of
misconfiguration, Windows XP Professional uses the Simple Sharing User
Interface (UI). The simple sharing UI appears if ForceGuest is turned on;
the traditional sharing and security tabs are shown if ForceGuest is turned
off.
On computers running Windows XP Professional that are not joined to a
domain, ForceGuest is turned on by default. To access the traditional
sharing and security tabs and manage permissions manually on these
computers, go to Windows Explorer or My Computer, click the Tools menu,
click Folder Options, click the View tab, and then clear the Use simple file
sharing (Recommended) check box. Note that changes made manually cannot be
undone by using the simple sharing UI, and although you might make what
appears to be a reasonable change to permissions, the resultant permissions
might not work as expected if ForceGuest is subsequently turned on.
By using the simple sharing UI you can create or remove a share and set
permissions on the share. When simple sharing is in effect, appropriate
permissions are automatically set on shared files and folders. The following
permissions are added when you use the simple sharing UI:
a.. Share permissions
b.. File permissions
c.. Allow others to change my files
d.. Dont allow others to change my files
When the Guest-only security model is used, the Sharing tab has only three
options:
a.. Share this folder on the network. Grants the Everyone group Read
permissions on the folder and its contents.
b.. Share name. The name of the share on the network.
c.. Allow other users to change my files. Grants the Everyone group Full
Control permissions on folders and Change permissions on files.
Sharing the Root Directory of a Drive
You can create a share at the root of the system drive, but simple sharing
does not adjust the file permissions on such shares. On a share created at
the root, the simple sharing UI is displayed in the property sheet, and
Sharing is added to the shortcut menu on the system drive icon in Windows
Explorer. There are two important reasons why it is recommended that you not
share the root directory of the system drive:
a.. By default the Everyone group is granted only Read permissions on the
root of the system drive, so sharing the root of the system drive is not
sufficient for most remote administration tasks.
b.. Sharing the root of the system drive is not secure - it essentially
grants anyone who can connect to the computer access to system configuration
information. For maximum security, it is recommended that you only share
folders within your user profile, and only share information that you
specifically want others to access.
Don't edit registry without using all safety measures.
1. At the Run command, type Regedit and click Enter.
2. Navigate to HKLM\System\CurrentControlSet\Control\LSA.
3. Select the ForceGuest registry value. Set ForceGuest=0 (Disabled).
4. Exit Regedit.
