Shared folder access restriction

[Dixie]

Hi everyone.

I have a network with a few computers (XP Pro and Home).

Info on each PC is backed-up to a common network PC (XP).

I do not want the different workstations to have access to each others backed up info.
Simple File Sharing is enabled and I would prefer it this way.

I tried Folder Guard, but unfortunately it does not work on shared folders, across a network.

Has anyone come across any other software (apart from the various flavours of MS Server stuff, and Linux) that will restrict/grant access to shared folders across a network, based on either IP, MAC address and/or another unique identifier?

In summary:
I want to restrict access, to a shared folder on a network, to certain users.

I would really appreciate any help, or pointing in the right direction...

 

[The_Unbeliever]

Hi Dixie

Unfortunately you have to disable "Simple file sharing" as this will give you more options on what to share to who and not.

 

[TheMightyQuin]

You can't have your cake AND eat it...either disable Simple File Sharing...or forget about it.

 

[Dixie]

Simple File Sharing is just a preference and not crucial. A third-party app will still be nice to have though.

Seriously, there is a HUGE gap in the market for such an app...

 

[hungrybeaver]

Well you could create a main Backup folder and have child folders for each of the PCs. Then you'd need to create user accounts for each of the folders and, on each folder, you would restrict sharing access to a specific user account. Then add the specific user account for the folder to each of the computers using Credential Manager (Start>Run>control keymgr.dll)

PCa = folderA
PCb = folderB
PCc = folderC

If done correctly you wont be able to access FolderA from PCb without entering a username & password.

 

[bubbatentoe]

I'd go with Beaver's solution.

Why get a 3rd party solution when Windows security is so easy to manage?
It's not like you need a degree in engineering to share a folder and limit sub-folder permission by username.

 

[yeti]

Please note that these instructions are for Windows 7. However, there exists an equal counterpart for each step below in Windows XP (Google is your friend) and the process is exactly the same.

Create a (non-admin) user account on the host (the computer with all the shares) for each individual in your network.

Follow these instructions on how to hide user accounts from the welcome screen on Windows 7 such that your welcome screen remains the same. [Note: for Windows XP use this process]

For each share, right click -> properties -> sharing. Click 'Advanced Sharing'.

Check 'Share this folder'

Click 'Permissions'

Click 'Add'

In the textbox entitled 'Enter the object names to select (examples):' enter the name of the individual to whom this share will belong. Note that if you are using a domain, you may need to enter the domain\username. Domain in this case could be the host computers name or the name of the domain of your network. Post here if this proves troublesome.

Click 'Ok'

You should now be on the 'Share Permissions' tab of the 'Permissions for xxxxx' dialog (where xxxxx is the name of your share).

Select 'Everyone' in the textbox entitled 'Group or user names:'

Deselect all checkmarks in the 'Allow' column for 'Everyone' in the textbox entitled 'Permissions for Everyone'.

Select the username you previously entered (should be located similarly to 'Everyone').

Select all checkmarks in the 'Allow column for this username in the textbox entitled 'Permissions for Everyone'

Click 'Ok'

Click 'Apply'

Click 'Ok'