Windows 7: Sharing and Permissions

Remember the SHARE tab is for how things are "shared" over the network. The security tab is for how things are shared over the network AND locally.

If share permissions conflict with security permissions for a network user, the most restrictive permission will apply to the user.

Shares can get VERY confusing when you have multiple accounts on the same machine and you want to make certain folders "private" locally but still have network access to them. Even more so if only certain people have accounts on certain machines. Things would be slightly different in a domain environment.

Example: I have a folder called "XXX" and I don't want my spouse to have access to that folder! She, by default has access to ALL folders outside of "My Documents". I suppose I could just put the "XXX" folder inside a subdirectory of "My Documents" but I also want my brother to have access to the "XXX" folder.

So what I am looking for is, allowing my brother and myself access to that folder over the network and locally, while denying my wife access to that same folder. Since we all have local accounts, by default we all have access to the "XXX" folder, what I need to do is set up sharing with security.

I would do the following, on the SHARE tab I would give me and my brother full control and my wife DENY. This takes care of NETWORK permissions ONLY. I would then go to the security tab and add my wife with DENY permissions, this takes care of things locally!!!

This is a very basic tutorial, other things to keep in mind is that if my wife insists on admin rights on her account then all bets are off. At that point she could just take ownership of the folder and game over!!! (Thank God for Domains!!!)

Very impressed with this tutorial. I set up a "share folder" on my Win 7 to network with XP Pro. Interesting thing was that I did not get the "Two Person" icon on the share folder (?).

I ignored this and set sharing and permissions anyway. I networked both ways to the XP and Win 7. with no problems. I guess my question is, how come there is no "Two Person" icon? As this is in my own home network and I am aware of the share folder on Win 7 it's not a big issue. However, there is nothing to tell me if I share other folders the fact that they are shared unless I select "Properties".

I am going to create a couple of other share folders on the desktop for testing to see if it was just me. May have ticked a wrong box somewhere.

Many thanks again for the tutorial.

You do...with Windows 7 the icon is in the status bar!!!

This "feature" is a widely known sore spot with users of "7" and "08 Server" It's an admin knightmare!!!

Yes, I remember the "Feature" not a "Fault" as MS policy.

I am now networking (sharing) a folder between 2 x Win 7 computers. Have "Access Denied" on both. I will work through it..........usual Security / Permissions problem.

Thanks for the "heads up"

Pat

Excuse me but i think i can shorten your tutorial.

You should discard all steps except 10 and 11.
In the sharing window you just type "Everyone" and windows will automatically create
the profile

is there any way to "share all folders" in one fell swoop?

Guys,

I have a Windows 7 64bit computer, a WinXP computer and a Ziova/Zensonic Network Media Player. With the NMP, all you can set is the IP address, sub-net mask, workgroup etc. There is no logon/password section.

For the NMP to see your shared folders, it simply has to be part of the same workgroup.

I can get my NMP to see both the WinXP and Windows 7 computer but when I select the Windows 7 computer from it's listings, it says "0 shares".

As for the WinXP computer, I have absolutely no problems. From a fresh install of WinXP, all I do is right-click on a folder, select Sharing, give it a share name and click ok. Voila, it appears in the NMP listing for that computer and any media files it recognises appear.

As for the Windows 7 computer, I have tried suggestions from half a dozen different forums and can't get it to work. Does anyone else have a NMP that relies on seeing Shared Folders and doesn't have the ability to send a username/password and have got it to see shares on a Windows 7 computer? If so, how do you do it?

It's not a show stopper at the moment as I just move the files from my Windows 7 computer to my Thecus NAS box and then watch it on my NMP. But if I'm planning on watching the show straight away (after I've trimmed it up), I would prefer not to waste time having to copy it to the NAS box but until I can get my NMP to see the Shares on Windows 7, this won't work.

problem solved, thanks, i was getting a little tetchy there!

Just got a computer with Win 7. Set everything up so the files could be shared with everyone. Worked fine for several days & then it stopped working. Win 7 computer can see all computers & has access to all shared files. The XP & Vista computers can see the Win 7 computer but when I try to access the shared files get the message Win 7 computer "not accessible. You may not have permission to use this network resource." The security & sharing options on the Win 7 computer are set for everybody with full access. The network name is the same for all computers. When I go to the Win 7 computer & tell it share under properties it comes back & tells me that the file can't be shared even tho the screen shows that it is shared. What step am I missing?