Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Share Folders on Win7-ULT32 with users SELECTIVELY

15 Apr 2010   #11
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Tom Stitt wrote this up awhile back and it seems to work but it also takes some effort to complete the process.

When the users connect, you need to have password sharing enabled (i.e. they must put in a password to enter the shared computer (they can always save this so they need not enter it next time). You now need 2 local users on the Windows 7 computer, e.g. call them user1 and user2 with their own respective passwords. Don't make them ADMIN users.

Note that you also need to remap the drives and use these logins and passwords for the drive mapping.

Now user1 has access to everything, so on the outside folder give them complete access (or read only as you desire, including access to the special folder inside). Repeat this action for user2. Now go to the special folder that you only want user1 to have access to. right click on it and select properties/security. On the permissions tab, have a look and write down the current permission settings (this is an important reducndancy step should something you do fail later). Now look for a tickbox to inherit parent permissions and untick this. Now give permissions only to those users that you want to access this folder. Be aware that you probably need SYSTEM and CREATOR OWNER on there.

Like all good plans, switch user to user1 on the Windows 7 box and test that they can locally access what they are supposed to. Repeat with User2. Now remap the drives with the new passwords and give the passwords out to the users.

This should fix your issue.


My System SpecsSystem Spec
.
17 Apr 2010   #12
TrumanHW

Windows 7
 
 

Quote   Quote: Originally Posted by CommonTater View Post
Quote   Quote: Originally Posted by TrumanHW View Post
So, I decided to build a server because all NAS solutions are expensive if they're decent, and some of the decent ones (QNAP 439pro) USES the intel ICH10r !!! The one thing I do NOT have with my server solution is the ability to choose which users have access to which folders. The HomeGroup sharing is really cool; and things like my media are ideal to give full read access to. However, I'd really like to be able to enable my friends to each have their own, password protected folders. Obviously, as the admin I could violate their privacy, but I'd like to be the only person they're all trusting.

I'm having a really hard time finding a way to give selective access. Am I retarded? Am i missing something?

Is the only way through homegroup or to just create user accounts? And if only through user accounts.. how do I restrict them from modifying (read/write as opposed to read only). Can multiple accounts be logged in simultaneously?

I do realize I'm kinda network clueless. Thanks for your help.. and even if its just to say you don't think I have a solution, please chime in.
Go to...

Control Panel -> Network and Sharing -> Advanced Sharing ->
Turn OFF public folder sharing
Turn ON "Use usernames and passwords to access other computers"

Now you need to set up individual shared folders by right clicking the folder, select sharing and create your file share...

To give different users, different permissions, select Advanced Sharing instead and you can add their usernames and adjust their permissions in the resulting dialog.

Only one "gotcha" in this... to access a computer, the user has to have an account name and password that exists on the TARGET computer... So if you want permissions tied to each user... you'll have to give them all accounts on the server (and other computers if they're going to access them as well).

You're awesome. VERY clear instructions. Good writing, good knowledge. Effective.

One hiccup, tried to login from a guest account and it didn't prompt me for a username and password. Is it not possible to login from an account that isn't the name of the account I'm on? It didn't prompt me for it ... if it is possible. How would I enable this option.......

Thanks again.
My System SpecsSystem Spec
18 Apr 2010   #13
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by TrumanHW View Post
Quote   Quote: Originally Posted by CommonTater View Post
Quote   Quote: Originally Posted by TrumanHW View Post
So, I decided to build a server because all NAS solutions are expensive if they're decent, and some of the decent ones (QNAP 439pro) USES the intel ICH10r !!! The one thing I do NOT have with my server solution is the ability to choose which users have access to which folders. The HomeGroup sharing is really cool; and things like my media are ideal to give full read access to. However, I'd really like to be able to enable my friends to each have their own, password protected folders. Obviously, as the admin I could violate their privacy, but I'd like to be the only person they're all trusting.

I'm having a really hard time finding a way to give selective access. Am I retarded? Am i missing something?

Is the only way through homegroup or to just create user accounts? And if only through user accounts.. how do I restrict them from modifying (read/write as opposed to read only). Can multiple accounts be logged in simultaneously?

I do realize I'm kinda network clueless. Thanks for your help.. and even if its just to say you don't think I have a solution, please chime in.
Go to...

Control Panel -> Network and Sharing -> Advanced Sharing ->
Turn OFF public folder sharing
Turn ON "Use usernames and passwords to access other computers"

Now you need to set up individual shared folders by right clicking the folder, select sharing and create your file share...

To give different users, different permissions, select Advanced Sharing instead and you can add their usernames and adjust their permissions in the resulting dialog.

Only one "gotcha" in this... to access a computer, the user has to have an account name and password that exists on the TARGET computer... So if you want permissions tied to each user... you'll have to give them all accounts on the server (and other computers if they're going to access them as well).

You're awesome. VERY clear instructions. Good writing, good knowledge. Effective.

One hiccup, tried to login from a guest account and it didn't prompt me for a username and password. Is it not possible to login from an account that isn't the name of the account I'm on? It didn't prompt me for it ... if it is possible. How would I enable this option.......

Thanks again.
As you found out, the method above requires you to have a second account on the machine you are sharing from.

The method I posted does not require this and is the only way to accomplish what you are trying to do.
My System SpecsSystem Spec
.

18 Apr 2010   #14
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by TrumanHW View Post
Interesting. So the quota they state (20) is not "real-world" ..? Regardless, 5 is adequate by far for me... and as far as using a different computer for it to spare my i7... why not just be consolidated?
It is 20 connections per share...

A common misunderstanding is that it means you can't have more than 20 computers in a workgroup, but that's not the case... if you could find a router to handle it (and they do exist) the upper limit is actually 32768 machines.

The thing is that no more than 20 of those machines can be connected to anyone file share at the same time.
My System SpecsSystem Spec
18 Apr 2010   #15
CommonTater

XP Pro SP3 X86 / Win7 Pro X86
 
 

Quote   Quote: Originally Posted by TrumanHW View Post
Quote   Quote: Originally Posted by CommonTater View Post
Quote   Quote: Originally Posted by TrumanHW View Post
So, I decided to build a server because all NAS solutions are expensive if they're decent, and some of the decent ones (QNAP 439pro) USES the intel ICH10r !!! The one thing I do NOT have with my server solution is the ability to choose which users have access to which folders. The HomeGroup sharing is really cool; and things like my media are ideal to give full read access to. However, I'd really like to be able to enable my friends to each have their own, password protected folders. Obviously, as the admin I could violate their privacy, but I'd like to be the only person they're all trusting.

I'm having a really hard time finding a way to give selective access. Am I retarded? Am i missing something?

Is the only way through homegroup or to just create user accounts? And if only through user accounts.. how do I restrict them from modifying (read/write as opposed to read only). Can multiple accounts be logged in simultaneously?

I do realize I'm kinda network clueless. Thanks for your help.. and even if its just to say you don't think I have a solution, please chime in.
Go to...

Control Panel -> Network and Sharing -> Advanced Sharing ->
Turn OFF public folder sharing
Turn ON "Use usernames and passwords to access other computers"

Now you need to set up individual shared folders by right clicking the folder, select sharing and create your file share...

To give different users, different permissions, select Advanced Sharing instead and you can add their usernames and adjust their permissions in the resulting dialog.

Only one "gotcha" in this... to access a computer, the user has to have an account name and password that exists on the TARGET computer... So if you want permissions tied to each user... you'll have to give them all accounts on the server (and other computers if they're going to access them as well).

You're awesome. VERY clear instructions. Good writing, good knowledge. Effective.

One hiccup, tried to login from a guest account and it didn't prompt me for a username and password. Is it not possible to login from an account that isn't the name of the account I'm on? It didn't prompt me for it ... if it is possible. How would I enable this option.......

Thanks again.
I'm guessing you have Guest accounts active on all your computers?
Just give them different passwords on each machine...

On Bark ... User == Guest, PW == Bark
On Meow ... User == Guest, PW == Meow

Now it will see the credentials don't match and it should pop up the password dialog.

However... You should note that as "Guest" is a member of "Everyone" but not of Users or Administrators... thus your Guests would have read only permissions unless you tampered with the "Everyone" permissions in the shares.

The logic behind this is sound...
If you don't want someone to see something... don't share it.
My System SpecsSystem Spec
18 Apr 2010   #16
zzz2496

Windows7 Ultimate 64bit
 
 

Quote   Quote: Originally Posted by CommonTater View Post
Quote   Quote: Originally Posted by TrumanHW View Post
Interesting. So the quota they state (20) is not "real-world" ..? Regardless, 5 is adequate by far for me... and as far as using a different computer for it to spare my i7... why not just be consolidated?
It is 20 connections per share...

A common misunderstanding is that it means you can't have more than 20 computers in a workgroup, but that's not the case... if you could find a router to handle it (and they do exist) the upper limit is actually 32768 machines.

The thing is that no more than 20 of those machines can be connected to anyone file share at the same time.
Hmm... I bumped connection limit in one of my client's network, it was using XP as a file server, there can be only 5 users transferring something from/to the XP machine (5 concurrent users) at any given time. You can connect to the XP machine as many as 20 users per share, but there can only be 5 users that is transferring... But then again, it's XP (this was around 2002), I assume since MS didn't change their policy in clients OS, then the 5 invisible limit is still there (Any Windows server will have 5 CALs, except the SMB edition)... These days I don't even bother to use ANY Windows as a file server, Linux is faster, more resilient, easier to manage, and it can backup like no Windows will ever be able to...

zzz2496
My System SpecsSystem Spec
18 Apr 2010   #17
TrumanHW

Windows 7
 
 

Lets say I don't want to share the entirety of drive D: with RDC connections or as a network shared folder.
Lets say user Mike for instance, who uses RDC, and needs access to D:\Backup\Mike
But Mike can't have access to the remainder of the D: drive; only selective access.

Currently, under D: security tab, there are members of the group:

Authenticaed Users
SYSTEM
Mike (C.Name\Mike)
Administrators (C.Name\Administrators)
Users (C.Name\Users)

Also, modifications are written after I changed them; are they being written to my OS drive? Or the drive where they are changed? If they are written to the drive I changed them on, D, will this .. 'meta data' be COPIED if I back the drive up? Or does it get striped off if I copy it?

In case it in anyway simplifies the objective, there will ONLY be two types of users; Administrators and users with restricted access, as I described above.

thanks

Also, I noticed the group names within computer management aren't exactly the same as under security, and therefor group policy changes I'd make wouldn't be certain. Is this inconsistency of naming convention accidental? Is there a conversion chart? Or is the difference in names indicative of differences that'd need to be observed.
My System SpecsSystem Spec
27 Apr 2010   #18
TrumanHW

Windows 7
 
 

bump
My System SpecsSystem Spec
Reply

 Share Folders on Win7-ULT32 with users SELECTIVELY




Thread Tools




Similar help and support threads
Thread Forum
How to share folders or partitions with specified users
Hello there, I know that probably this question has been posted a lot of time, but I cannot find a working answer so I am here to ask again, don't kill me for this, it is simply not working for me :confused: So, I have this PC with Windows 7 on it. I have a partitions (but I've tried with a...
Network & Sharing
Users / All Users Redundant Folders
I will if I have to manually delete them, although I'm not sure what other files may still be around on my drive that are located in Users/All Users that are redundant any recommended programs that I could depend on for this task ?
Software
How to Share Among Users on the Same PC
Hi. There's something very basic about "sharing" that I'm misunderstanding. Does the term "sharing" mean sharing with other computers on the network? If so, then how do you share folders with another user on the same computer? Here's an example: Each of my sons has a Standard user account on...
Network & Sharing
How can two users share the same data?
I just bought a new HP Windows Home Premium 64bit HP PC and am migrating over (slowly) from an older XP machine. I have set up 3 user accounts, two of them standard, and would like two of the accounts (only) to share some of the same data files. For example, I use Picasa for photo storage and I...
Network & Sharing
Possible to selectively hide folders?
How can I make a folder completely INVISIBLE to a standard user account BUT visible to the administrators account? Before you respond, let me state that I can successfully prevent the standard user account from opening the folder. So they are unable to look inside. I can do this already. ...
General Discussion
Cannot Share Files between users on the same PC
All I want to do is share files between users on the same PC. I've tried everything... From right clicking on the file, properties, sharing, and selecting the users I want to share the file with. After these steps the file cannot be seen by other users. I also tried duplicating these steps and got...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:09.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App