Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to block one computer from LAN without blocking everyone else


28 Aug 2010   #1

Windows 7 Ultimate X64
 
 
How to block one computer from LAN without blocking everyone else

I'm running a pretty simple LAN network. I have a D-link DGL-4500 and about 2 computers running constantly on the WORKGROUP network (plus an old D-link router that I disabled the DHCP server on to run as a switch for my PS3 and Xbox). I want to share two certain folders with anyone that brings their computer over, but block my roommate from being able to access these folders. When I turn on Password Protected Sharing, anyone that comes over is prompted for a username and password, and instead of giving them the info each time, I would love to simply block my roommates computer alone. Something like \\VENTO is an exception to the everyone full access rule.

I have my A+ certification, but permissions and such in windows 7 is a little new to me and haven't had a lot of time to fiddle with advanced network options (still trying to memorize the address range to the different classes...Anyone have a rhyming scheme?) . So any complex jargon you may have I can comprehend

Both my roommate and myself are running windows 7 ultimate. Any help is appreciated.

My System SpecsSystem Spec
.

28 Aug 2010   #2

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

If you remove the permissions from "Everyone" on the individual folders and add individual permissions at which ever level you wish, to each user account that you wish to have access, that should do the trick.

Workgroup networking does not use the computer object as is used in a domain so all permissions are user based.

You could also create a new user group and give this the permissions you need then assign the allowed user to this group - how you go depends on what variation of accessibility you need for your users
My System SpecsSystem Spec
28 Aug 2010   #3

Windows 7 Ultimate X64
 
 

Quote   Quote: Originally Posted by Barman58 View Post
If you remove the permissions from "Everyone" on the individual folders and add individual permissions at which ever level you wish, to each user account that you wish to have access, that should do the trick.

Workgroup networking does not use the computer object as is used in a domain so all permissions are user based.

You could also create a new user group and give this the permissions you need then assign the allowed user to this group - how you go depends on what variation of accessibility you need for your users
Thats the problem though, I really didn't want to set up permissions for each user. I have random people that drop by with their computers and different OS's and accounts, and if there was some way to simply block my roommate's computer by its name, adding him to the exception of the everyone permission, then I would be a happy camper.

Basically the permissions I want is full control of those folders, so each person that comes by can drop movies and music and etc. into said folders, and pull other files out as they please. I cannot express how hard the route you are talking about will be since some of my less computer-savvy friends have no idea what to do when it asks for a password (not to mention some of them are very paranoid about someone like me going through their computer, ha.) I have certain files automatically download into these folders and to copy them onto my public folder is impossible since these two folders are shared on 2 2TB drives.

I tried to resolve this by buying a NAS and setting up an exception for his local IP, but the transfer speed even at gigabit speeds was a measly 9MB/sec from this particular NAS (don't buy a cheap D-Link NAS).

Is there no other way you could think of setting up the permission with this scenario? I was always told Windows file sharing is kind of a joke compared to other OS's, but I didnt think it was this borked
My System SpecsSystem Spec
.


28 Aug 2010   #4

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

Does your room mate have an account on your system that he/she uses to access it?

If so you can use the deny option to block that user specifically - as the Deny overrides all other permissions be careful to only apply it where it is needed.

One other way would be to create a user specifically for this task remove the everyone access to the folders give this user access and give this information to others on an ad-hoc basis (but not to your room mate)
My System SpecsSystem Spec
28 Aug 2010   #5

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

Just had a further thought - Comodo's firewall has an option to set-up a blocked network - this can consist of a single IP or better still MAC address

this may work ? it means more software but Comodo firewall is a good thing in general anyway
My System SpecsSystem Spec
28 Aug 2010   #6

Windows 7 Ultimate X64
 
 

Quote   Quote: Originally Posted by Barman58 View Post
Does your room mate have an account on your system that he/she uses to access it?

If so you can use the deny option to block that user specifically - as the Deny overrides all other permissions be careful to only apply it where it is needed.

One other way would be to create a user specifically for this task remove the everyone access to the folders give this user access and give this information to others on an ad-hoc basis (but not to your room mate)
Now thats an option that I completely forgot about. Two days without sleep will do that...No Im not trying to excuse my stupidity

I will try to find out his username account and see if I can get him blocked. I wish there was a search function that would pop up all users who are currently sharing public folders and allow me to select a user from that list like so:

http://img541.imageshack.us/i/capturexb.jpg/

But when searching for users outside of my computer since locations only shows:

http://img838.imageshack.us/i/capture2t.jpg/

I'll reply back to see if I can find a solution to this dilemma; thanks again for your help barman58
My System SpecsSystem Spec
28 Aug 2010   #7

Windows 7 Ultimate x64 x2 + x86 + Windows 8.1 x64 x2
 
 

There is the shared files section of the Computer Management interface that shows shares, sessions, and files status
My System SpecsSystem Spec
29 Aug 2010   #8

Windows 7 Enterprise 64bit
 
 

Quote   Quote: Originally Posted by Barman58 View Post
One other way would be to create a user specifically for this task remove the everyone access to the folders give this user access and give this information to others on an ad-hoc basis (but not to your room mate)
I wanted to "second" this option as I think it would be simple and effective. Your friends can try to connect and you can have a simple user named "access" with a password.

Does your roommate access anything on your computer? Why not create a separate subnet? I think you can block him completely from your system.
My System SpecsSystem Spec
29 Aug 2010   #9

Windows 7 Ultimate 64-Bit
 
 

Put there MAC address into the router for blocking under MAC address filtering.
My System SpecsSystem Spec
29 Aug 2010   #10

Windows 7 Ult, Windows 8.1 Pro,
 
 

This is an age old problem and it's not easily solved.

With Windows 7 it's best to create a restricted user group then add the users you don't want to have access to that group. It's explained pretty well in the link below.
GUIDE: How to protect directories from childrn and other usrs of a PC
My System SpecsSystem Spec
Reply

 How to block one computer from LAN without blocking everyone else




Thread Tools



Similar help and support threads for2: How to block one computer from LAN without blocking everyone else
Thread Forum
RSA Key Blocking is Here Security News
Solved How to unblock/block a specific computer? Network & Sharing
Solved IE9 - Blocking Ads? Browsers & Mail
WLM blocking senders Browsers & Mail
I want to block all access from a computer in the LAN System Security
block video playing on computer General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 08:40 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33