Seeing computers on network

[mholt05]

I need help in fixing a small network. We have 14 computers on a network, in 6 different rooms, sharing a broadband internet connection. How can we set it up so that some of the computers can share files between themselves but not be available to the other computers? Can networks be set up within networks?

We're running Windows XP Pro, XP Home, and Windows 2000.

[Gizmo]

Choose the computers you want to share folders between and set them to be shared. Then set the access permissions on each of the shared folders. That way you make them visible to the computers you want them to be visible on and not on others.

[glc]

Upgrade the XP Home computers to XP Pro and it will be a lot easier to set permissions. You will want to disable "simple file sharing" on all the XP boxes. You will need to add local users on each machine - corresponding to the logins used on the other machines that you wish to grant access to. Blank passwords will not work, everyone needs to use a real password, unless you feel like playing with the group policy editor.

[mholt05]

I changed the XP Pro computer from simple file sharing so I can now set permissions for it. Someone told me to log in to the XP Home computers in safe mode so that I can set permissions so I tried that and that worked. But I can't figure out how to set the permissions. I believe I have to create a group and then put users in it but I don't know how to do that. I could add a user on that computer but I couldn't figure out how to add a user from another computer. What syntax do I use?

Thanks for your help!

[geezertech]

You could also create different workgroups, then those not in the workgroup can't see in. Geezer

[glc]

Excellent point, geezer! I forgot all about that - and you can keep using simple filesharing that way.

[mholt05]

But can't someone just change their computer to that workgroup, too? Does it show the other workgroups and just not allow you in if you're not on that workgroup or does it not show the other workgroups at all?

[glc]

How concerned are you about security? If you have users you don't trust, then you need to do the XP Pro on all boxes and no simple filesharing thing.

[mholt05]

My budget is limited so I don't want to have to buy Pro for the other computers if I don't have to. Security and privacy are important but not critical right now, but down the road I think it will become more of an issue with my bosses. I would like to just go ahead and have it all figured out before that happens. I brought up the question about security before they networked the whole building but the guy who arranged it didn't realize all of the computers would be able to see each other - he thought it would just enable everyone to be able to use the Internet connection and that would be all.

I have my one Pro machine set to do permissions and the 2000 ones are already set up that way. I can go into safe mode on the three Home machines and set permissions. What I need to know now is how to set the permissions. I tried but I'm not doing something right. Do I create a group or just add users to an existing group? Also, how do I set a permission for another computer on the network? I can get it to add a user on the computer that I'm on but I can't figure out how to add one from another box.

[rave]

Originally Posted by mholt05 Does it show the other workgroups and just not allow you in if you're not on that workgroup or does it not show the other workgroups at all?

when you go into MY NETWORK PLACES you can see ALL the workgroups. right now on my University accomodation block, i can see 3( MSHOME, WORKGROUP, ROBBIE).


if you cant install XP pro on all(i doubt few people have the money for that)you can try what i did

(after making all workgroups the same and enabling file sharing)
*normally people have troble connecting from xpHOME to xpPRO. so what i do is just add all the accounts from the xpHOME computers to the xpPRO(exactly same login and password). at the xpPRO welcome login screen, there will be ALOT of accounts. therefore i use microsofts powertool tweakUI to remove the accounts from the welcome login screen(removing the clutter). The accounts will still be on the xpPRO computer but just hidden from login*

this method might not be very efficient for you since u have 14 computers to share. but its easier for me since i have only 4.

hope this helps.and if it doesnt....i tried.LOL

[glc]

On the machines that you do not want to let access others, you can disable file and print sharing - and as another layer, disable NetBIOS over TCP/IP, and as a 3rd layer, take file and print sharing out of the Windows firewall exception list.

[mholt05]

Well, I have kind of fixed my problem. I found a post on the Microsoft forum similiar to mine. It said to enable the guest account and password protect it. So I did and that works fine. I just have to type in the password the first time I access one of the computers from another computer. I can live with that. At least it keeps each department separate from the others.

Thanks for everyone's help.