Sharing USER folders on a small network - Sharing & Security S

Similar Threads:

1.Sharing USER folders on a small network - Sharing & Security Setti

FEEDBACK IS WELCOMED AND ENCOURAGED ABOUT SECURITY ISSUES OF THIS *TIP*! (For 
XP Pro, MCE and Home.)

I have seen many posts from people who are unable to share personal USER 
folders across a network, even though the computers can see each other, they 
can access OTHER folders, and the desired USER folders have been shared. (The 
same problem often exists for Program Files, Windows and other system 
folders.) I have struggled for years with this Microsoft "feature." 

I have seen many workarounds (like copying files to a folder outside of 
Documents and Settings). I have tried disabling Simple File Sharing, but that 
is only a first step and is not an option for WinXP Home. I have tried MANY 
other "fixes" like "Enable the Guest Account" but nothing seems to work. 
UNTIL NOW! I found a tip showing how to access security and access settings 
in Win XP Home and getting around the "Simple File Sharing" problem.

Following is a summary of how I FINALLY was able to share all of my files 
and folders between WinXP Home, WinXP Pro and WinXP MCE on my small network. 
(It has worked for me on several systems since!)

DISCLAIMER: I am not a computer professional and do not know the security 
implications of making the following changes. I have not been able to find 
any help determining the security issues. 
So BEFORE YOU TRY THIS:

1. Be sure that you are on a small, secure network (like a Home Office 
setting) in which all users are trusted and responsible. You DO NOT want to 
grant Full Access to your system in a larger office or when you have children 
with access to your computer!
2. SET A SYSTEM RESORE POINT!!!
3. Be sure you have a *secure* firewall in place. Ideally, use a hardware 
AND software Firewall.
4. If you are using a wireless router, be sure to enable WPA encryption and 
use a good password. (WEP is no longer secure. If needed. Get a firmware 
upgrade or a new router to support WPA.)

(Aside: Anybody know how to make shares password protected?)

---------------------------------------------------

FOLLOWING ARE ALL THE STEPS I TOOK on Win XP Pro, MCE (Section 1) and XP 
Home (Section 2). . .
---------------------------------------------------

SECTION 1:  Windows XP Pro or Media Center Edition:
---------------------------------------------------

1) To disable simple file sharing, follow these steps:

	a. Click Start, and then click My Computer. 
	b. On the Tools menu, click Folder Options, and then click the View tab. 
	c. In the Advanced Settings section, clear the Use simple file sharing 
(Recommended) check box. 
	d. Click OK. 

2) To share a folder or a drive with other users, follow these steps:

	a. Click Start, click My Computer, and then locate the folder or drive that 
you want to share. 
	b. Right-click the folder or drive, and then click Sharing and Security. 
	c. On the Sharing tab, click Share this folder. 
	d. To change the share name of the shared folder or drive, type a new name 
in the Share name box. Other users see the new name when they connect to this 
shared folder or drive. The actual name of the folder or drive does not 
change.  
	e. To add a comment about the shared folder or drive, type the text in the 
Comment box. 
	f. To limit the number of people who can connect to the shared folder or 
drive at the same time, click Allow under User limit, and then type the 
number of users.  
	g. To set share permissions on the shared folder or drive, click Permissions.

2b) IN SOME CASES, YOU MAY NEED TO REPEAT THE ABOVE STEPS FOR SPECIFIC 
SUB-FOLDERS THAT "RESIST" SHARING (especially personal folders in "Documents 
and Settings," "Program Files," "Windows," and certain other system folders).

3) To enable access to shared folders by specific groups, follow these steps:

	a. Click Start, click My Computer, and then locate the folder or drive that 
you want to share. 
	b. Right-click the folder or drive, and then click Sharing and Security. 
	c. On the Security tab, look under "Group or user names" for an entry 
called "Everyone."
	d. If "Everyone" is there, select the group and check the box for "Full 
Control" in the "Allow" column. Repeat for all other groups in the list to 
verify that they have Full Control as well. 

WARNING! THE "DENY" CHECKBOXES ARE DANGEROUS!!! You may lock out even the 
Administrator if you make a mistake here. It is better to uncheck "Allow" 
than to check "Deny."

	e. If "Everyone" is not listed, you must add it with the following steps:

		i.   Click the "Add" button.
		ii.  In the resulting dialog box, click the "Advanced" button.
		iii. In the next dialog box, click the "Find Now" button.
		iv.  In the resulting list at the bottom, scroll down to "Everyone" and 
highlight it.
		v.   Click OK, then OK again.
		vi.  Now "Everyone" should be listed in the "Group or user names" list.
		vii. Be sure "Everyone is highlighted and check the box for "Full Control" 
in the "Allow" column.

	f. Once all groups have been Allowed "Full Control," click on "Apply."

NOTE: THIS MAY TAKE SEVERAL MINUTES TO COMPLETE, especially for large 
folders or a whole drive.

3b) IN SOME CASES, YOU MAY NEED TO REPEAT THE ABOVE STEPS FOR SPECIFIC 
SUB-FOLDERS THAT "RESIST" SHARING (especially personal folders in "Documents 
and Settings," "Program Files," "Windows," and certain other system folders).

---------------------------------------------------

SECTION 2: ON WINDOWS XP HOME:
---------------------------------------------------

1) Boot the computer in Safe Mode. 

	a. Repeatedly press F8 early in the boot process to call up the boot menu. 
	b. Use the arrow key to highlight "Safe Mode" and hit enter.
		Be patient; Safe Mode boots slowly.

2) Click "Yes" if prompted for permission to complete the boot into Safe Mode.

3) Login as Administrator (if prompted for a username), and supply password 
if needed.

4) Click "Start/Accessories/Windows Explorer" to open a Windows Explorer 
window.

5) Navigate to the drive or folder you wish to share. 
	Highlight it in the left pane so its contents appear in the right pane.

6) Select the menu Tools/Folder Options.

7) On the "View" tab, be sure the following items are selected:

	a. [CHECK] Display the contents of system folders
	b. [Radio-Button] Show hidden files and folders
	c. [UN-CHECK] Hide protected operating system files (Recommended)

NOTE: This will help ensure that permissions and security settings will be 
propagated to all (most?) sub-folders under the folder being changed. For 
example, there is data in each personal user folder for "Application Data" 
that is normally hidden.

8) Click on "Apply," the "Apply to All Folders," and finally "OK."

9) Now follow steps 2, 2b, 3, and 3b written in the section above for 
"WINDOWS XP PRO or Media Center Edition." 

Keep in mind that some subfolder resources may need to be explicitly 
modified to get access. For example, if you set Full Access for "Documents 
and Settings," you may ALSO need to set Full Access for "USER1" and "USER2" 
or "USER1/Application Data" separately, etc.

10) Reboot the computer normally (not in Safe Mode) and test the access to 
the newly shared folders. Note any folders that still result in the dreaded 
"Access is denied" error. Repeat the above steps explicitly for these 
stubborn subfolders as needed.

---------------------------------------------------

I hope this works for you too! Comments?

-- 
Thanks!
srtriano

2.Sharing and Security settings for Users Shared Folders and Off

3.Sharing and Security settings for Users Shared Folders and Offline

I have a problem with users being able to see other users shared folders on 
the server, and want to have the users redirected documents available on both 
the server for backup but also in thier My Documents folder on their 
workstations

4.Help Changing "c:\users shared folders" to "x:\users shared folders"

Obviously xcopying files and permissions is easy enough to accomplish.

My challenge is to modify Small Business Server 2003 in a way that new users 
will be created in "x:\users shared folders" after I've moved them there 
from the default "c:\users shared folders".

Any links, tips and step-by-steps would be greated appreciated!

5.Copy local users and groups, copy shares with security, copy home user folders