How do I restrict access to sub-folders?

[Addikt]

So that basic idea is that I have a shared hard drive for my household, however I don't want to share ALL of the data, just most of it. Is there any way that I can share the entire drive and set certain folders to be restricted and thus not visible when users try to access the hard drive over the network?

I hope that made sense. Anyways, any help would be appreciated.

 

[JackMDS]

There is No point to share the whole drive as a unit, share only the Folders that you want to share.

Successful Sharing involves some general consideration in Network settings, http://www.ezlan.net/sharing.html

As well as specific adjustment of each computer according to what it is allowed to be shared.

Vista File and Printer Sharing- http://technet.microsoft.com/e.../library/bb727037.aspx

Windows XP File Sharing - http://support.microsoft.com/d...x?scid=kb;en-us;304040

Printer Sharing XP - http://www.microsoft.com/windo...t/honeycutt_july2.mspx

Windows Native Firewall setting for Sharing XP - http://support.microsoft.com/kb/875357

Windows XP patch for Sharing with Vista - http://support.microsoft.com/kb/922120

 

[Addikt]

I know how to create a network, share printers, set permissions. I just wanted to know if there was any way to set restrictive permissions rather than ones that grant access for certain folders.

One solution I was thinking about was chaning the folder permissions rather than the sharing permissions but I couldn't figure out how to do this.

Also, my goal is to simplification for the most part. The problem is that the hard drive has many folders but there are only a few that I would like to restrict access to. If I share each folder individually then they all show up individually when someone connects to the computer. I would rather have one folder, than have a whole bunch of them show up. It just makes it a lot easier to navigate.

 

[Jamsan]

Turn off simple file sharing, share the root folder you want as top level. Go into the properties of the sub-folders you want to revoke access to, click on the Security tab, and then advaced. Un-check the box that says Inherit permissions from the parent folder. Once that is done, apply your specific deny or revoke permissions to the users you don't want accessing it.

 

[bruceb]

You could also create a new folder for your folders you don't want to give
access to and then set it's permissions so only your user account can
access it.

 

[mooseracing]

Changing the inherit permissions can turn into a mess. If this is a home network no problem, but I wouldn't do that in a business setting. In the business setting I would use NTFS permissions along with Share Permissions.

 

[JackMDS]

You can grant permission by folder and decide who would have permission.

You can not set a folder with permission for evry one, and ban only "your little bother".

You can ban specific people if you set an ftp server with virtual folders. Many ftp server would let you set a list of banned users.

P.S. the Vista link in my above post was not functioning correctly. I changes it to a link that includes info about folder permission too.

 

[SolMiester]

I think list folder and read come as one in rights, therefore you will need to use a deny group to remove access at each folder you dont wish to have access.

 

[Jamsan]

Originally posted by: JackMDS
You can grant permission by folder and decide who would have permission.

You can not set a folder with permission for evry one, and ban only "your little bother".

Sure you can. Deny permissions take prescendence over any grant permissions. If a user has permissions, and there is a specific deny permission against it as well, the deny will take affect even if another ACL gives him rights.

 

[kevnich2]

I think was Jack was meaning is for a home network, don't make it overly-complicated. Like others have said, instead of sharing the entire root, just share specific folders. Now if you do want all the folders shared for your access from other computers but don't want others, then go through the turn off simple file sharing and set the NTFS permissions. This will only work with WinXP and Windows Server. What I did was setup groups and place myself in the administrative group and everyone else as users. I shared out everything (In the sharing permissions, just set it all users and give full access, set the permissions in the security section) then set up the NTFS permissions for restricted folders to only grand access to the admin group but not anyone else. Windows permissions go by the most restrictive which is why I don't bother with the shared level permissions, it just adds to much complexity.