Newbie-like questions on file permissions & network access on Windows XP

[GreenGhost]

I still don't get how security works under XP, so my questions may be dumb to most:

How to make my files unaccessible from another user of the same computer, and yet, allow me to access my files through the network?

Here's what I did:

I went to my top folder in "Documents and Setting" (what I'd call HOME) and clicked on "Make this folder private" to protect the files from other users of the same computer.

Now I want to access my files, but I cannot "share" any of my data because of that protection. So what's the correct way that would allow me to access my data (after a password-protected login), while still keeping files unreadable to others. In summary all I want is a chmod on my home directory.

/E: (It's NTFS, XP Home, in case that matters)

 

[Thor86]

With XP Home edition, you have to login as the local administrator, as even other users with administrator privileges cannot modify the security settings of folders/files.

 

[tart666]

after you make the folder private, run "rundll32.exe ntlanui.dll,ShareManage " to modify network share permissions...

 

[blcjr]

Originally posted by: Thor86
With XP Home edition, you have to login as the local administrator, as even other users with administrator privileges cannot modify the security settings of folders/files.

As a win2k administrator with only minimal experience so far with xp, I find these postings enlightening. Can I presume that this is a limitation of xp home and not xp pro?

One more reason not to like xp home.

 

[blcjr]

Originally posted by: tart666
after you make the folder private, run "rundll32.exe ntlanui.dll,ShareManage " to modify network share permissions...

You cannot do this from a sharing tab on the folder properties page?

Actually, the normal recommendation in windows network security is to ignore share permissions, and focus solely on NTFS permissions. NTFS permissions override share permissions, so even with the default Full Control to the "Everyone" group share permission, if a user does not have NTFS permissions to the folder, they will not have remote access to the share.

 

[tart666]

Originally posted by: blcjr

Actually, the normal recommendation in windows network security is to ignore share permissions, and focus solely on NTFS permissions. [...]

Doesn't GreenGhost want to lock other users out locally, but give himself share permissions? he'd
have to deal with shares permissions then, no?

 

[Smilin]

what he's saying is share permissions don't apply at all for local users so its better to use ntfs for "security" and use share permissions just for granting "access" (ie leave it everyone read or fc)