restricting a drive to a particular user

  • Thread starter Thread starter David Rothman
  • Start date Start date
D

David Rothman

my main machine is running XP-Home but has doug knox's kludge security tab:
http://www.dougknox.com/xp/tips/xp_home_sectab.htm

(this lets me have an xp pro-like security tab in xp home.)

other machines are both xp-home and xp-pro.

i have a 2nd drive in my main machine (F:). i have restricted access on
that machine to ME (no other logon has accces to that drive).

i have identical logons on all my other machines (same username/pw).

no users on any of the other machines can access f:, but i would like access
to it (when i'm logged on as ME). i can't figure out what to enter in the
Security tab to enable this.

can anyone help? thanks

p.s. i had been accomplishing this using hidden drives, but i find when i
use \\main\f$ , the action of me typing that string in causes it to hang
around on that remote machine and thus others are able to see it. my
preference is a drive that's totally closed to everyone other than user =
ME.
 
To do that you would need to use XP Pro on your main computer because XP Home
only uses simple file sharing which means that everyone must have share and
folder permissions to the share for anyone to access it. In XP Pro you can
disable simple file sharing and thus give specific users/groups instead of
everyone share permissions. --- Steve

http://www.practicallynetworked.com/sharing/xp/filesharing.htm --- XP simple
file sharing explained
 
hi. i understand that, but Knox's idea which gives me the security tab
should enable me to set it up (i think). i am able to set share
ermissions - i just haven't quite gotten the syntax correct.

for example, i can regularly add 'everyone' to protected shares to open them
up...i just don't know specifically what to add to allow "ME" access thru
the network.
 
That is the problem in XP Home. You can only create shares that are
available to everyone - not specific users like in XP Pro. If you create a
share and can give access to only a specific user then no one will be able
to access the share because in XP Home all users authenticate to shares as
guest and not as themselves. XP Home was not designed to be a secure
operating system for network access control. --- Steve
 
i understand that, but again the security panel is enabled as described in
Knox's webpage thus i can specify users ala Pro - i just don't know the
syntax of what i need to add.
 
I think that Doug's utility let's you see NTFS permissions in XP Home like
you can in XP Pro without booting into Safe Mode for XP Home? If you want to
configure that drive so that only you can access it while logged on locally
to that computer then add just your user account to the list of permissions
with full control permissions and remove all others while logged on as an
administrator. If you have not seen the link below it may help you
understand configuring NTFS permissions better including how to deal with
inherited permissions. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418
 
doug's utility let you change the permissions (and i do this all the time -
for example adding 'everyone' to certain folders in 'documents and settings'
which lets me access them across the lan).

maybe i wasn't clear tho. i have changed it so that only i (username = ME)
can access it locally. no other user can get into the drive. what i'm
looking to add (as a permission) is the ability to access it across the
network when i'm logged in as ME on a different machine.

i believed that as long as the username/pw were the identical across
machines, i would be able to do this, but i cannot so i'm guessing that i'm
using the incorrect syntax. thanks
 
What you want to do is not possible in XP Home. In XP Home you can only
access a share as guest via simple file sharing which means that everyone
needs permissions for both the share permissions and folder/NTFS
permissions. In your case if you were logged on as a specific user and try
to access your XP Home computer access will be attempted as only guest and
access to your drive that has permissions for use ME will fail. If you look
in the security log via Event Viewer on your XP Home computer you will see
that type 3 network logons are all as guest/anonymous. --- Steve
 
aahh..ok. thanks. i should be able to do it in reverse tho - connecting as
the remote user into the xp-pro machine. i'll mess around that way. thanks
 
Back
Top