Guest account can access shared admin account folder

[mrsteve0924]

first let me get it out of the way that i can't stand setting up file sharing over a LAN. it still seems way more complex than it should be. Took me hours and hours to finally figure out that it wasn't good enough to enable the share option on a folder, but i also have to enable security settings too. Anyway that was a few years ago and as you can see I am still not over it

Ok now to my question...First, I've disabled simple file sharing. The homegroup sharing method is just too limited. I need to be able to share multiple drives and want to just share the root of the drive and homegroup won't allow it (why not? )

ok really now to my question...Seems the only way to share my local user account over the LAN is to enable permissions for the Everyone group. When I do that the Guest account can easily access those folder/files. Do I really need to specifically deny the Guest account access in the security settings? So in my head if Guest is not listed as an option in the security tab then I think that would mean they do not get access. But it looks like that is not the case


I just want admins from any PC on the LAN to have access to folders i share. It seems there is no way to select a group like that in the security settings though.

 

[pcgamer4life]

If you only want local admin accounts to have access, then skip setting up specific shares all together and just access the hidden shares that are available to admins by default after enabling sharing:
\\servername\c$ will get you to the drive, \\servername\c$\windows will take you to C:\Windows, etc.

Otherwise, you'll need to set up your share permissions for only the specific local users you want to have access, or to the local Administrators group (or a group you create and add the users to). You really shouldn't give access to Everyone on a share in practice.

 

[mrsteve0924]

hidden shares? that's a new one to me.

i didn't mean to say local admin access. what i have is a different user account on each one of 3 PCs on my LAN. what i want to do is make each User account folder (all admins) on each machine open to each machine. Seems the only way to do that is give permission on the share folder to Everyone. I do not see a way to give permission to a specific user account on the other PCs.

and by using the Everyone group it gives permissions to the Guest account which i don't want to do.

 

[pcgamer4life]

You can't do that with the standard workgroup functionality (I don't think), you'll need to either set up a domain (impractical for home use), or leverage the homegroup (which you've already said you didn't want to do). Otherwise, you'll have to give each user an account on each box, and when you connect to the remote share and it prompts for credentials, you'll login as the user you created on each remote machine. For simplicity, you can have them all named the same thing (administrator, or whatever) with the same password if you want.

 

[mrsteve0924]

... Otherwise, you'll have to give each user an account on each box, and when you connect to the remote share and it prompts for credentials, you'll login as the user you created on each remote machine. For simplicity, you can have them all named the same thing (administrator, or whatever) with the same password if you want.

good ideas. let me give it a try.

you know homegroup would work if it let you share the root drive. oh well.

 

[DocClock aka MadClocker]

If you have the parts lying around, the best option for me would be to setup a server where certain groups have access by default and "normally" guests have restricted or no access depending of the OS

Also depending on the OS, you could have the option of the server being the internet gateway, or just another computer on your home network

 

[mrsteve0924]

If you have the parts lying around, the best option for me would be to setup a server where certain groups have access by default and "normally" guests have restricted or no access depending of the OS

Also depending on the OS, you could have the option of the server being the internet gateway, or just another computer on your home network

i did start looking into domain controllers and it seemed like setting up a server was overkill for my humble home network. not to mention i would have to get a new rig with a new server installed.

i'm keeping the idea in the back of my head and if i stumble across a the right parts i'll go for it. thanks

 

[pcgamer4life]

If you end up building a home server, don't bother running a domain controller, that IS overkill for your scenario. Just put a flavor of linux on it and setup samba shares.

 

[mrsteve0924]

If you end up building a home server, don't bother running a domain controller, that IS overkill for your scenario. Just put a flavor of linux on it and setup samba shares.

i came across Samba when i was researching domain controllers. i do have a little experience with Linux, and less with servers, domain controllers, active directories and the like.

Is Samba relatively easy to work with? most of what I read seems over my head.

 

[pcgamer4life]

If you're familiar with Linux, it should be relatively easy to set up. If not, I'm sure there are packages for Ubuntu, etc, that can be configured with a GUI.