How share permissions work in a non domain environment?
I am used to working in a domain environment, with shares set something like this, Share permissions: Authenticated User's-Full Control, NTFS Permissions: Security Group 1- whatever permission. Since Effective permissions are most restrictive of the two, NTFS is where you set the users/groups you want to have access to the resouces etc. I am now trying to determine how share permissions work on windows 7 computers in the same workgroup, but not in a domain. I know there is the homegroup option for win7 and I have used it some, but I am looking to learn more about how the permissions work in just a workgroup, and how to setup somewhat customizable permissions. The main thing I am trying to setup and understand how it will work, is to be able to access shares from a computer using the credentials stored on that computer, while on a different computer. For example: I want to make a share on PC1, that I can access from PC2. I realize that you cannot add user's from PC2 to a folder's security on PC1 since there is no domain. So say I want to open a share located on PC1 from PC2, such as \\PC1\testShare. When I do that is there a way I can supply the credentials of a admin account on PC1, in order to access shares located on it? Usually the problem here is that when I try to access a share on a different computer, it asks for credentials but it's only looking for credentials in the local computer's domain that I am directly using, which of course do not have any security access on the remote resource on this other computer. >Basically I will have 3 or so win7 computers in the same work group, on the same physical network, that I will normally use local user account's on that are in the Admin's group. And I want to remotely be able to access the other computers just using the local account credentials of a user account stored on the computer I am trying to access. For example, From PC2, I type in \\PC1\C$, it prompts for credentials but only from the local PC2 Domain. Is there a way to enter the credentials of a account that has Admin on PC1, in order to connect to the admin share from PC2? I see these network setting's may have something to do with this "Password Protected Sharing" ( I have set to off) "Use user accounts and passwords to connect to other computers" options In the end I may put all the computers in a home group for ease of access to some files like media, but my main goal is to learn more about how this sharing works, so I can access my files access across my computers on the network restrict other people on the home network from doing so. Other people will have computer's connected to the same physical network, and I do not want them being able to access share files on my computer, unless I give them the password of an account on my computer that has access.(If that is possible in the way I am thinking)
March 31st, 2011 7:26am

Hi, You may refer to the following similar thread to check if it helps: File sharing - Restricting access to folders Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 1st, 2011 6:29am

Ok thanks I see that. It seems from that thread, that they used a homegroup, and then the option to use the user accounts to manage access, not the homegroup, and then created user's with the same passwords on each computer. I'm wondering if it is possible to setup this type of access separately from the homegroup. So create usera, on PC1 and PC2. And then use usera credentials to access shared files between the two computers. But also use or not the the homegroup to share other things?
April 1st, 2011 9:45pm

Hi Endoftheline, The information in my previous post is also available for the computers not on homegroup which is the same as the previous system version: Share files with someone After that, if you will be on homegroup later, you may refer to the following settings to continue those permission: Should I manage my home network connections manually or use Windows to do it automatically? But if you've previously set up customized sharing permissions on your network following the procedures in Windows XP or Windows Vista and you want to maintain those permissions when using a homegroup, you can choose to manage network connections yourself. If you choose this option, you'll need to use your user account and password when accessing other computers. When you use the “Use user accounts and passwords to connect to other computers” option, it will use your user account and password when accessing other computers and not use the HomeGroup$ as a default user to access other computers. Hope it helps. Please correct me if I was misunderstood. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 4th, 2011 9:43am

Hi, I was wondering how everything is going. If anything is unclear, please let me know. It is my pleasure to be of assistance. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 6th, 2011 9:30am

Thanks for the follow up, I still have some questions about this actually. Let me explain the general setup I am trying to get. So across like 5 computers with windows 7 that are in the same network and workgroup, I am trying to have some different file sharing options. Following some of what was posted, I have set these options: >Under HomeGroup connections: I am using user accounts and passwords to connect to other computers >user must have a user account and password on this computer in order to access file So I tehn created the same user account on two different computers, and gave it access to the files on one computer I wanted to be accessed, and this works ok, I can login from the other computer wtih the user account that exists on both computers, and then access the files on the other rcomputer. However what I would also like to do is to have a shared folder on my computer that anyone can access on the network, while also being able to share just specific folders that someone would have to have the same user account as on my computer created on their computer to be able to access it. I tried setting share and ntfs permission to everyone on a folder, but other computers could still not access it, I think because I have this option set: >Users must have a user account and password on this computer in order to access files So I'm wondering if there is a way to I guess disable this option, the: >Users must have a user account and password on this computer in order to access files but still setup a little more advanced file sharing. Also I am not using a homegroup at all for this. I realize the homegroup exists, but it doesn't seem to offer any of what I want, which is more specific to allow only people with the password to one of my user accounts to access files, and then to just allow everyone on the network to access certain folders.
Free Windows Admin Tool Kit Click here and download it now
April 18th, 2011 9:48pm

Hi Endoftheline, You may try to check the folder permission to see if the accounts have the permission for this shared folder. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 20th, 2011 8:28am

Hi, I would like to know the status of the issue. If you have any questions or concerns, please feel free to let me know. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2011 5:40am

Hi Endoftheline, You may try to check the folder permission to see if the accounts have the permission for this shared folder. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Well the access works to the folders that have the account I created on both computers added to the security permissions. If you see my post above, I am trying to also create a general shared folder that is shared with everyone on the network. I gave it share permissions and ntfs permission of everyone, but computers were still not able to access it without an account, I think because I have this option enabled: >Users must have a user account and password on this computer in order to access files It seems have to have that enabled it seems in order to user user accounts to manage the network access. So I am trying to detemrine how I can have a folder that is open to everyone on the network, and also use the same user account on both computers setup, to allow access to specific folders.
April 25th, 2011 9:03pm

Hi Endoftheline, I think this goal cannot be achieved. In workgroup, we can only share the folder with the user who has the same account in this computer. If we use the homegroup feature and check the option “Use user accounts and passwords to connect to other computers”, it also will let the users who have the accounts in this computer to access. Base on the current situation, if there are not so many computers and users in the network, you may add all the accounts on the computers to do this as a workaround. If there are too many computers, I suggest using the domain to control the permissions. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2011 9:33am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics