Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Permissions Question

06 May 2010   #1
Corpsecrank

Win7 64bit Ultimate
 
 
Permissions Question

So I ran into an issue today. I wanted to make a folder and share it on a network. However I did not want more than 2 specific computers to be able to access this share. I wanted to restrict the permissions down to just the computer hosting the shared folder and another computer with which the folder was to be shared.

For the life of me I could not add a new permission for just the second machine. I tried adding the computer by name and it would not go I also tried a whole lot of other things with no luck.

Could someone please explain how setting up a new permission for just a single computer on the network is done? I just want to add and allow access for one specific machine other than the host to be able to access this share.


My System SpecsSystem Spec
.
06 May 2010   #2
Barman58

Windows 10 Pro x64 x2 Windows 10 Enterprise x64, Ubuntu
 
 

Although this type of permission is possible with a client-server system I do not think it is possible with a workgroup.

The correct tokens are not available in the normal workgroup to allow this and although the computer nome is part of the id of the user it is not the separate object as it is with for example windows server.
My System SpecsSystem Spec
06 May 2010   #3
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by Corpsecrank View Post
So I ran into an issue today. I wanted to make a folder and share it on a network. However I did not want more than 2 specific computers to be able to access this share. I wanted to restrict the permissions down to just the computer hosting the shared folder and another computer with which the folder was to be shared.

For the life of me I could not add a new permission for just the second machine. I tried adding the computer by name and it would not go I also tried a whole lot of other things with no luck.

Could someone please explain how setting up a new permission for just a single computer on the network is done? I just want to add and allow access for one specific machine other than the host to be able to access this share.
This question comes up pretty often and there seems to be a couple ways to do this. The popular way involves setting up some extra user accounts on the machine you need to share from. That way you can designate who you can share with in your network. Follow the steps below. This does work when using Workgroups. Posted by Tom Stitt awhile back.

When the users connect, you need to have password sharing enabled (i.e. they must put in a password to enter the shared computer (they can always save this so they need not enter it next time).

You now need 2 local users on the Windows 7 computer, e.g. call them user1 and user2 with their own respective passwords. Don't make them ADMIN users.

Note that you also need to remap the drives and use these logins and passwords for the drive mapping.

Now user1 has access to everything, so on the outside folder give them complete access (or read only as you desire, including access to the special folder inside). Repeat this action for user2.

Now go to the special folder that you only want user1 to have access to. Right click on it and select properties/security. On the permissions tab, have a look and write down the current permission settings (this is an important reducndancy step should something you do fail later). Now look for a tickbox to inherit parent permissions and untick this. Now give permissions only to those users that you want to access this folder. Be aware that you probably need SYSTEM and CREATOR OWNER on there.

Like all good plans, switch user to user1 on the Windows 7 box and test that they can locally access what they are supposed to. Repeat with User2. Now remap the drives with the new passwords and give the passwords out to the users.

This should fix your issue.
My System SpecsSystem Spec
.

06 May 2010   #4
Corpsecrank

Win7 64bit Ultimate
 
 

Putting a password on the computers in question or changing anything for that matter is not an option because those computers are not mine and are part of a business.

Basically I was asked if there was some way that 2 of the computers in the one office could bounce files quickly and easily without other machines on the network being able to see those files. I figured that making a shared folder on one machine and then restricting access to that folder to only the other computer in the room might be the best idea.

Little did I know that you could not simply restrict access to a specific computer and that you had to add an entire group of some type.

The problem for me is that I can only seem to add everyone if I want anyone outside of the host computer to be able to access the share.

If I were able to make a new group and add the second computer to that group I might be able to allow just that one new group to access the share. The problem is that I don't know anything about creating a new group for that and even if I did create that group how would that affect the way that computer acts on the network. I have to make sure that I am not causing any problems on this network while trying to make this happen.
My System SpecsSystem Spec
06 May 2010   #5
KiwiME

Win7 32-bit family pack
 
 

Can't you simply make the shares invisible using a $ in the name like you could in XP? Map the shares on the client machines to a drive letter which requires typing in the path explicitly.
My System SpecsSystem Spec
06 May 2010   #6
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by Corpsecrank View Post
Putting a password on the computers in question or changing anything for that matter is not an option because those computers are not mine and are part of a business.

Basically I was asked if there was some way that 2 of the computers in the one office could bounce files quickly and easily without other machines on the network being able to see those files. I figured that making a shared folder on one machine and then restricting access to that folder to only the other computer in the room might be the best idea.

Little did I know that you could not simply restrict access to a specific computer and that you had to add an entire group of some type.

The problem for me is that I can only seem to add everyone if I want anyone outside of the host computer to be able to access the share.

If I were able to make a new group and add the second computer to that group I might be able to allow just that one new group to access the share. The problem is that I don't know anything about creating a new group for that and even if I did create that group how would that affect the way that computer acts on the network. I have to make sure that I am not causing any problems on this network while trying to make this happen.


Just adding the special Users to the machine being shared from isn't all that difficult. And the passwords can be remembered by the machine if you choose that option. The directions make it look harder than it really is. It's very simple once you do it the first time. The method I posted is the only way far as I know.

But I agree there should be an easier way. Individual users would need to show up on the permissions list without adding those users to the machine account. For some reason it doesn't work like that, it's either everyone or nobody otherwise. The method I posted has been tried and was proven to work by the way.

There may be a way to set up dual ownership on a file but I havn't tried that yet.
My System SpecsSystem Spec
07 May 2010   #7
Barman58

Windows 10 Pro x64 x2 Windows 10 Enterprise x64, Ubuntu
 
 

All access in a workgroup is user based - computers do not have the Tokens required to be given access permissions.

Depending on which OS and SKU you may be able to add an additional group on the sharing machine allocate the access rights to that group and then add the users from the second machine. this would ease the management of the access.

How many users are involved on the machine that needs access (these need to be duplicated on the sharing machine) ?

If you had the centralized control provided by a Server then this matter would be a relatively simple one
My System SpecsSystem Spec
07 May 2010   #8
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Quote   Quote: Originally Posted by Corpsecrank View Post
Putting a password on the computers in question or changing anything for that matter is not an option because those computers are not mine and are part of a business.

Basically I was asked if there was some way that 2 of the computers in the one office could bounce files quickly and easily without other machines on the network being able to see those files. I figured that making a shared folder on one machine and then restricting access to that folder to only the other computer in the room might be the best idea.

Little did I know that you could not simply restrict access to a specific computer and that you had to add an entire group of some type.

The problem for me is that I can only seem to add everyone if I want anyone outside of the host computer to be able to access the share.

If I were able to make a new group and add the second computer to that group I might be able to allow just that one new group to access the share. The problem is that I don't know anything about creating a new group for that and even if I did create that group how would that affect the way that computer acts on the network. I have to make sure that I am not causing any problems on this network while trying to make this happen.
You could do this with a portable 3rd party software. If that is an option???

Or

If the computers are close to each other you could put a USB External hard drive on a USB hub between the machines. You would both be able to access the files on the external hard drive. Or simpler yet a USB Flash drive.
My System SpecsSystem Spec
07 May 2010   #9
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Looks like even when the Op gets exactly the correct responce sometimes it's still not the right answer.

I think I'm going to experiment by setting up a shared folder with dual ownership and see if that might work.
My System SpecsSystem Spec
07 May 2010   #10
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Quote   Quote: Originally Posted by chev65 View Post
Looks like even when the Op gets exactly the correct responce sometimes it's still not the right answer.
Lol....

Quote   Quote: Originally Posted by chev65 View Post
I think I'm going to experiment by setting up a shared folder with dual ownership and see if that might work.
Let us know how this works.
My System SpecsSystem Spec
Reply

 Permissions Question




Thread Tools




Similar help and support threads
Thread Forum
6 PC home network permissions/security question
We have a home network with 6 pc's with various OS's. I think somewhere in one of the Tutorials I read to use user "Everyone" to setup the Network. With the different OS's we are not using the HomeGroup setup thru Windows. The system is up (and has been) running fine but reading another post...
Network & Sharing
Question on adminstrator permissions
On my Win 7 Pro 32bit PC...when I enter CMD screen and try to initiate a chkdsk /f at reboot...I am getting the following error: Access denied as you do not have sufficient privileges. You have to invoke this utility running in elevated mode There is only one user on this PC and I...
Performance & Maintenance
Permissions
Due to the fact that SFC says that the uDWM.DLL is corrupt on my system, I'm attempting to replace it from the OS disc, according to Brink's tutorial. Everything seems to work fine, until the last step, and it pops an error dialog, saying that I can't, because it can't delete the original. I'm...
Performance & Maintenance
Permissions
I've been a Windows user since Windows 2.0 and have been using Win7 for about three weeks, so I will probably be posting a ton trying to get help as I slowly re-learn an OS that I have used for decades. Win7 is very, very different... I am having major issues with drive mapping and permissions....
General Discussion
permissions help
Hi, i'm trying to turn off the read-only thing for my c drive (or at least the program files folder), i'm getting access denied and it's driving me nuts, please can someone tell me how to change this, and if possible disable all the permissions nonsense?
System Security
Yet Another "Permissions" question - Cant delete folder
Ok, I have UAC off, tried two of the registry hacks to "Take Control" when I right click a file/folder. These files and folders are not on my main "C" drive. This is on a different hard drive. I am logged in as Admin (the account I made when I installed 7". All I want is to control the...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:44.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App