Re: Network setup problems

On Fri, 15 Apr 2005 11:59:00 -0400, "MDriggers" <mdriggers@xxxxxxxxxxxxxxxxxx>
wrote:

<SNIP>

>Chuck,
>
>Thanks for your patience and the words of instruction on proper newsgroup
>etiquette. Your advice is well-taken and appreciated. My apologies to
>Malke for accusing a flame when it was not quite severe enough for that
>label.
>
>My _computer_ problem is complicated by the fact that the individual user
>folders (share 3 according to your query above) were set up not by me, but
>by our technical advisor (a church member who works in IT with a state home
>for developmentally disabled and advises us on our network setup), so I'm
>not completely in the know on how he set those up. His time is very
>difficult to come by (I contacted him about the problem on Tuesday) so
>meanwhile, I decided to see what kind of help I could get on the newsgroup.
>
>Your understanding is correct.
>File server OS: XP Pro
>File Sharing Advanced or Simple?: Assume advanced, but don't know for sure.
>Users: currently 6 or 7. Don't anticipate heavier user load for quite some
>time.
>Shares 1 and 2 will be for access by everyone (is PW protection available
>via login?)
>Share 3 (which was already set up) will be for each individual user.
>
>Does this help?
>
>Morris

Morris,

Firstly, thank you for bottom posting. I was fearing from your second post that
you're a top poster, and that frequently interferes with my ability to find, and
deal with each, response. ;)

Do you have administrative access to the computers (I'm assuming a workgroup
here, so you need administrative access to all computers).

If this is a workgroup, is each user computer "owned" used by one (or maybe two)
individuals, each with a different userid (and non-blank password)? If so, is
each userid (and identical password) setup on the server? Or are you guys maybe
trying to use a common userid somewhere, to save on administrative complexity?

When you get over 5 users, IMHE, you are getting very close to where a domain
(unfortunately requiring Server 2003 @ $700 - $900) is justified, in terms of
administrative complexity, security, and functionality. With a workgroup, you
must have identical userids and passwords setup on both the client (computer
owned by individuals) and the server (computer accessed in common by each
individual). The ongoing task of synchronising userids and passwords, on all
computers, becomes very painful, I know from experience. God forbid that the
church treasurer should sometimes sit at the secretary's desk and use that
computer too.

That being said, let me outline how I would setup one client computer, and the
server, as an example, to accommodate one staff member.

Both computers run XP Pro, both with Advanced File Sharing (Simple File Sharing
disabled), and both under Local Security Policies (Control Panel -
Administrative Tools) - Security Options, look at "Network access: Sharing and
security model", and ensure it's set to "Classic - local users authenticate as
themselves".

Computer A (also Windows XP Pro hopefully) would have 2 accounts - Administrator
(with administrative functionality), and User1 (with user functionality). Both
with non-blank passwords. User1 would use the User1 account, religiously (PI).

Server would have 2 accounts - Administrator and User1, both with non-blank
passwords identical to those on Computer A. User1 setup as a member of group
Users (and implied as a member of Everyone). Shares 1 and 2 permissioned under
Sharing to Everyone, and under Security, to Everyone and Users. Share User1
permissioned under Sharing to Everyone, and under Security to User1.

Is this in precise agreement with your setup, or is there maybe a shortcut that
somebody has taken, that might explain your unique circumstances?

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.
.

Relevant Pages

  • Re: Connecting to printer always asks for username/password..
    ... >Access Control method because of it's better security. ... users identical usernames and passwords, ... Guest account in both kinds of file sharing. ...
    (microsoft.public.windowsxp.network_web)
  • RE: A question about a basic security setup...
    ... A question about a basic security setup... ... > I was thinking of running iptables on the dual homed host, ... What you are looking for here, is an "application proxy" type firewall. ...
    (Security-Basics)
  • Re: Execute MDX from T-sql -Procs and Cons?
    ... from there without having to setup anything special in the web.config. ... use that account. ... On the MSAS server I would set up the same username/password, ... > Application security ...looks like the only right choice... ...
    (microsoft.public.sqlserver.olap)
  • Re: permissions anomaly in XP noted by W2K user
    ... Microsoft MVP (Windows, Security) ... > My friend has taken his WXP Pro computer home, and I have only been able ... > no such check-box under My Computer, Tools, Folder Options, View Tab. ... > can opt for non-simple file sharing, while Home has no such option. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Home networking fighting back at me
    ... >I have just setup a 2 pc home network, ... With XP Pro, ... On XP Pro with Simple File Sharing enabled, make sure that the Guest account is ...
    (microsoft.public.windowsxp.network_web)