Discussion Locked

Restrict directory access on network

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have 5 Windows XP PCs connected via Ethernet/router. One PC is used to store daily backups from the other PCs on a second partition on the hard drive. The backup PC is also used for public access to the Internet by visitors (set to limited user account).

I want to allow only the respective user to access their specific directory on the backup PC and not access anyone else's directory. I also want to completely hide the backup partition from the visitor's log-in.

I have tried adding users with full permissions on the backup PC but it only adds user accounts on the backup computer, it doesn't identify users on the other computers.

What would be the best means to achieve this?

6 replies

by ken g.

And it won't, at least not without a lot of aggravation. No, you can use XP Pro as a Workgroup server but its ACL's (Access Control Lists) are relegated to local Users & Groups and can be manipulated by disabling Simple File Sharing on each machine and assigning permissions through full NTFS control. My take? Don't bother. You'd be better off with a Windows Server product. It would offer you the type of control you're looking to achieve and more.

If you purchase any Microsoft Press manual for Office 2003 products there is a CD in the back of each one that offers a 180-day trial of Windows Server 2003. This I think would be your best bet. That way you have six months to decide if that is what you really desire before spending the amount of cash a server product will set you back. HTH :)

by hal 9000

Just a quick note here on the Trial Pack of 2003 SBE it only supports a 5 site License so anymore will not be connected at the same time.

You could always try one of the Linux or BSD server applications but if you have had no experience with these it will be a high learning curve but it just might work out cheaper than the cost of the Full 2003 Server Edition of Windows as these are not cheap to buy. :)

by rkuhn040172

Or take your backup storage to a small business/personal NAS type product such as the Mirra (www.mirra.com).

I believe it will do what you are asking at a much cheaper cost (no Windows licensing).

In addition, for security sakes, you get the backups off of your visitors public access machine.

by e_sand

I USED TO MAP NETWORK DRIVES ON THE pc'S OF THE USERS, THEN IN EVERY COMPUTER YOU NEED TO RUN ON THE GROUP POLICY EDITOR, TO DO THIS GO TO RUN AND TYPE GPEDIT.MSC AND HIT ENTER; THEN GO TO USER CONFIG\ADMIN TEMPLATES AND LLOK FOR THE OPTION TO HIDE NETWORK DRIVES, IN THIS WAY YOU CAN SPECIFY WHICH DRUVERS YOU CAN SEE IN THIS SPECIFIC COMPUTER

by hammondholt

I have had to do something very similar, though you do have a few quirks. As one of the other people have said, this can be aggravating, but it's cheaper than a server.

Don't give Full Permission accounts on the Backup PC. Instead, replicate each user's login name/passwords on the Backup PC, but assign them Limited Accounts. This prevents these accounts from browsing to the other directories, but it also allows them to access this PC on the network -- but again, they can't browse to the other directories. (Though I don't know why, if the other PCs have Internet access, why you want the users to be able to logon to the Backup PC).

On the Backup PC, create a limited account for the "guest" to logon to use the Internet. Then, and I'm assuming you've assigned a drive letter to this second partition, deny access to this drive by this account. You'll have to disable Simple File Sharing and allow the more complex Windows 2000 sharing so that you can restrict access to the partition by user, groups, etc.

This discussion is closed to new replies.