How to block one computer from LAN without blocking everyone else

I'm running a pretty simple LAN network. I have a D-link DGL-4500 and about 2 computers running constantly on the WORKGROUP network (plus an old D-link router that I disabled the DHCP server on to run as a switch for my PS3 and Xbox). I want to share two certain folders with anyone that brings their computer over, but block my roommate from being able to access these folders. When I turn on Password Protected Sharing, anyone that comes over is prompted for a username and password, and instead of giving them the info each time, I would love to simply block my roommates computer alone. Something like \\VENTO is an exception to the everyone full access rule.

I have my A+ certification, but permissions and such in windows 7 is a little new to me and haven't had a lot of time to fiddle with advanced network options (still trying to memorize the address range to the different classes...Anyone have a rhyming scheme?) . So any complex jargon you may have I can comprehend

Both my roommate and myself are running windows 7 ultimate. Any help is appreciated.

Barman58 said:

If you remove the permissions from "Everyone" on the individual folders and add individual permissions at which ever level you wish, to each user account that you wish to have access, that should do the trick.

Workgroup networking does not use the computer object as is used in a domain so all permissions are user based.

You could also create a new user group and give this the permissions you need then assign the allowed user to this group - how you go depends on what variation of accessibility you need for your users

Thats the problem though, I really didn't want to set up permissions for each user. I have random people that drop by with their computers and different OS's and accounts, and if there was some way to simply block my roommate's computer by its name, adding him to the exception of the everyone permission, then I would be a happy camper.

Basically the permissions I want is full control of those folders, so each person that comes by can drop movies and music and etc. into said folders, and pull other files out as they please. I cannot express how hard the route you are talking about will be since some of my less computer-savvy friends have no idea what to do when it asks for a password (not to mention some of them are very paranoid about someone like me going through their computer, ha.) I have certain files automatically download into these folders and to copy them onto my public folder is impossible since these two folders are shared on 2 2TB drives.

I tried to resolve this by buying a NAS and setting up an exception for his local IP, but the transfer speed even at gigabit speeds was a measly 9MB/sec from this particular NAS (don't buy a cheap D-Link NAS).

Is there no other way you could think of setting up the permission with this scenario? I was always told Windows file sharing is kind of a joke compared to other OS's, but I didnt think it was this borked

Barman58 said:

Does your room mate have an account on your system that he/she uses to access it?

If so you can use the deny option to block that user specifically - as the Deny overrides all other permissions be careful to only apply it where it is needed.

One other way would be to create a user specifically for this task remove the everyone access to the folders give this user access and give this information to others on an ad-hoc basis (but not to your room mate)

Now thats an option that I completely forgot about. Two days without sleep will do that...No Im not trying to excuse my stupidity

I will try to find out his username account and see if I can get him blocked. I wish there was a search function that would pop up all users who are currently sharing public folders and allow me to select a user from that list like so:

http://img541.imageshack.us/i/capturexb.jpg/

But when searching for users outside of my computer since locations only shows:

http://img838.imageshack.us/i/capture2t.jpg/

I'll reply back to see if I can find a solution to this dilemma; thanks again for your help barman58

Put there MAC address into the router for blocking under MAC address filtering.

This is an age old problem and it's not easily solved. :)

With Windows 7 it's best to create a restricted user group then add the users you don't want to have access to that group. It's explained pretty well in the link below.
GUIDE: How to protect directories from childrn and other usrs of a PC