Member Avatar for anish_annu

I have 3 PC's on LAN running XP pro..all hv few shared folders on network and any of us can use any of that folder..(using simple file sharing)..
All are getting connected to ZXDSL 531B modem and are sharing internet B/B connection through that only..
If sum guests visit and want to use internet he can get access to dat, which we hv no problem for that.. but the problem is dat he can also get access to our internal network and can share those shared files/folders very easily, dat i dont want..
how can we restrict other users/guests on other PC's/laptops (except 3 of us).. so that they can only use internet but cannot use those shared folders..
Plz. help me out regarding this issue..
I dont want to use any server, win 2003 serv., or dont want to create domain..i can only use the available resources i.e. win xp pro..
Plz. guide me thorougly..
thanks in advance..

  • 5 Contributors
  • 6 Replies
  • 288 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by TheOgre

Dani AI

Generated

Short answer: keep guests off the same LAN segment as the machines that host your shares. Network isolation is the simplest, most reliable fix and does not require a server, domains, or touching every Windows account.

If your router/AP supports a Guest SSID or "AP/Client Isolation", enable that and put visitor devices on it. If not, a cheap second router or an inexpensive travel AP can create a NATed guest network. On the guest segment block Windows file‑sharing ports (TCP 139 and 445, UDP 137–138) so guests get Internet only and cannot see or connect to your PCs. This is a practical, low‑risk implementation of 's isolation idea and avoids messing with user accounts on all machines.

If you must keep everyone on the same subnet, lock access on each XP box. To extend and ’s suggestions into concrete steps: create separate, non‑admin local accounts for the three owners via Control Panel > User Accounts; disable "Use simple file sharing (Recommended)" in Folder Options; then on each shared folder use Advanced Sharing and the Security (NTFS) tab to remove "Everyone" and grant access only to the named accounts. For seamless cross‑PC access either use identical username/password pairs on each PC or map drives and supply credentials.

Notes and cautions: test on one folder before changing everything, and keep a spare local administrator account for recovery. If you use encryption (as mentioned), export and safely store the user encryption certificate/key — losing it can permanently block access to files. Back up data before large permission changes.

Recommended Answers

All 6 Replies

Member Avatar for DimaYasny

create some users, they have to be the same on all machines, and have the same passwords
set up permissions per user

create users for internet use only - deny them the permissions

Member Avatar for Michael_Knight

You can also encrypt the folders, they will see the contents, but not be able to open them.

Member Avatar for ScudRunner50

Simply right click on the share folders and go to "Sharing and Security" you can set up access limitations there. Unless you want to be very secure about it, in which case you can follow knight's suggestion and use encryption

Member Avatar for anish_annu

thanks for replying..
All the 3 PC's in our network hav only one user that too has admin rights..
Is it compulsory to create other users also..
And, whether Yes or No, plz. do tell me step by step to do so..

create some users, they have to be the same on all machines, and have the same passwords
set up permissions per user

create users for internet use only - deny them the permissions

Member Avatar for DimaYasny

a server with active directory is mainly there for centralised user administration.
if you don't want that, you need to keep a list of same users with same passwords on all workstations. if you do that, you will be able to assign permissions per user, no matter which workstation he logged in from. kind of like if you did have a server

Member Avatar for TheOgre

I can think of a number of ways, depending on how much time and energy you want to put into the solution. If you only want to use the tools within XP, I suggest reading up on some Micro$oft KB articles on the built-in firewall (look for "exceptions").

If you're handy with some flavor of Unix/Linux, you can create a small DMZ for your guests to use, complete with a DHCP server to hand out addresses on a separate network. You can download m0n0wall or pfSense for free and use that. The options are limited only by your ability and motivation. After all, if you *really* don't want others to see your files, how far will you go to protect them?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.