Question

User Access in a Workgroup

Asked by: itsonelouder

I have a windows workgroup. Is it possible to specify permissions to users and groups residing on other computers in the workgroup. If so, how can I do this. Whenever I go to add users it is only showing me the users on my computer, I can't select users and groups on other computers in the workgroup.

Thanks for any help.

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2006-03-08 at 02:03:52ID21765059
Tags

workgroup

,

can

,

how

,

access

Topic

Miscellaneous Networking

Participating Experts
2
Points
200
Comments
31

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. workgroup permissions ???
    Hi, I have a home network consisting of 3 computers. All using Windows XP Home Edition. The setting up should have been simple with the wizard, but anyway... The problem seems to be with the host computer. The cables and hub etc must be working ok for each computer can inde...
  2. Printserver in a Workgroup
    I have a print server in a workgroup. How can I enable access to the printers on the server to other users/groups in the same workgroup?
  3. Workgroup not accessible:  No permission
    I am running WXP-Pro SP2 on a desktop and a laptop Desktop is connected to a Linksys WRT55AG router by an ethernet cable Laptop has an internal wireless adapter. Both computers are able to surf the net. However, they cannot see each other Here's the message I get on both com...
  4. Workgroup security
    Hello, I want to completely restrict access to my tables, and restrict ability to modify forms/queries/reports by my users. I tried the Workgroup Administrator feature but I got lost trying to create the users, I was never able to locate the users ?!?!? What are the proper...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: masnrockPosted on 2006-03-08 at 03:09:07ID: 16131753

Workgroups are not designed that way. You have to have a local account on the computer that's sharing the files, then control access that way. When users on other machines attempt to access files on yours, they have to authenticate into your machine. So unless they know a username/password combination to an account on your machine, they won't see any thing.

What version(s) of Windows are you running?

 

by: itsonelouderPosted on 2006-03-08 at 03:28:53ID: 16131832

I'm running XP Proff on both.

So I cannot specify different levels of permission to users in a workgroup who access a share/files over the network?

I just ran a little test and it seems that all access over the network in a workgroup is controlled by the permissions on the guest account. Is that correct?

 

by: itsonelouderPosted on 2006-03-08 at 03:32:47ID: 16131854

So if Bob and John are on the remote computer, they both have to have exactly the same permissions to any shared folder/files when accessed over the network because they're using the guest account.

 

by: itsonelouderPosted on 2006-03-08 at 03:52:28ID: 16131943

Is that correct?

 

by: ECNSSMTPosted on 2006-03-08 at 06:19:14ID: 16133013

access and control is decentralized.  each resource pc controls access to itself.  
If you want to have Bob login to your PC, you have to create an account on your PC for Bob.
If you want to have John login to your PC, you have to create an account on your PC for John.

If you want to logon to Bob's PC, Bob will have to create an account for you on his PC.
If you want to logon to John's PC, John will have to create an account for you on his PC.

If John wants Bob to log on to his PC, John will have to create an account for Bob on John's PC
If Bob wants John to log on to his PC, Bob will have to create an account for John on Bob's PC

Access rights (permissions) will be controlled by the owners of those respective PCs, or the workgroup admin assumes that task, which means to effect sharing between the 3 PCs and 2 users remote users, 6 user names with permissions will have to be created as exampled above.  This does not take into account the respective users being given access to their own respective PCs.  This process exponentially escalates with more users being given access to all PCs and at some point the thought of having a client/server setup begins to look very attractive to the admin.

 

by: masnrockPosted on 2006-03-08 at 06:39:11ID: 16133383

ECNS pretty much answered it right to the point. I don't know what type of environment you're operating in, but if you're needing to share things for an office, client-server would by far do you much better. Had you been in an Active Directory enviroment, you'd only have to do access controls on the server, which would involve the AD accounts, not the individual computer accounts.

 

by: itsonelouderPosted on 2006-03-08 at 06:49:13ID: 16133671

Thanks ECNSSMT, that's clear now.

User accounts with the same name and password need to be created on each computer in a workgroup to control access to resources for all those users.

One thing I don't understand though is why access to resources over the network can be controlled using the guest account even though I've switched it off on my computer. What's that all about? I just tested it.


 

by: ECNSSMTPosted on 2006-03-08 at 07:20:27ID: 16134415

If Guest is disabled on the target; when you go into the Users folder, is there a red x on the upper left hand side of the icon, and when you open up Guest; there is a X in the checkbox next to "Account is disabled"?  If these parameters are true, you should not be able to log into the target PC as Guest.

The only thing would be if you were logging onto another PC that didn't have its Guest account disabled.  I know I've had my instances of "slip digits".

 

by: itsonelouderPosted on 2006-03-08 at 07:35:38ID: 16134783

the guest account isn't disabled but it's disabled in user accounts in control panel. i thought they were the same thing

 

by: itsonelouderPosted on 2006-03-08 at 07:40:48ID: 16134908

Sorry, ignore the comment above.

The guest account isn't disabled but it's "turned off" in user accounts in control panel. i thought they were the same thing.

 

by: ECNSSMTPosted on 2006-03-08 at 09:42:12ID: 16136244

Hi itsonelouder,

Could we clarify "turned off".  

If anything else, it soulds like the account was still active..

regards,

 

by: itsonelouderPosted on 2006-03-08 at 10:09:15ID: 16136513

You can have the points ECNSSMT, but maybe you can clarify this too ;)

When I go into User Accounts, it says "Guest Account is off". When I go into computer management and look at the guest user account though it isn't disabled. When configured like this I've found that I can control user's access to resources by assigning/removing permissons for the guest account. However I did disable the guest acount and I couldn't access resources even when I'd created the same account of both pc's and given appropriate permissions to that account.

From what I can gather, if the guest account is disabled in computer management, no access across the network can be achieved. What "Guest account is off" means in User Accounts I have no idea.

 

by: masnrockPosted on 2006-03-08 at 10:39:30ID: 16136804

I think when it's off, it only disables someone on THAT computer from logging in as Guest. Disabling is self-explanatory. I know, it sounds strange.

Exactly how do you have the shares established?

 

by: itsonelouderPosted on 2006-03-08 at 10:48:02ID: 16136904

Thanks masnrock for your help.

It is odd. The guest account is the guest account is it not? Either it's on or it's off, disabled or enabled.

I know this is another question but it's all kind of related.  Does anyone know for sure whether the guest acount has to be enabled for access to shared resources over the network (in a workgroup). It sounds like an unnecessary security flaw because by creating accounts on all computers you wouldn't think the guest account would have to be enabled because another account is being used. I spent a little time putting this to test but it didn't seem to be possible to access resources without the guest account enabled.

 

by: ECNSSMTPosted on 2006-03-08 at 10:51:48ID: 16136938

From what I can gather, if the guest account is disabled in computer management, no access across the network can be achieved. What "Guest account is off" means in User Accounts I have no idea.

I am trying for the life of me to determine what that refers to, especially in reference to Computer Management as a whole.  It would be nice if you can somehow post a screen shot; it may jar something.  I assume that you are using a default install of XP and there are no third party management tools up there.

 

by: itsonelouderPosted on 2006-03-08 at 10:57:13ID: 16136994

Default XP. I don't know how to post a screenshot.

 

by: masnrockPosted on 2006-03-08 at 11:02:32ID: 16137046

It shouldn't have to be enabled. Normally, you should get prompted for a username and password if your own username and password will not log you into that other machine. Every version of Windows gets weirder.

 

by: masnrockPosted on 2006-03-08 at 11:03:44ID: 16137053

Print Screen button will make a screen shot of your entire screen to your clipboard. Alt+Print Screen will make a screen shot of only the active window. You could do that, then post the picture on a website, which you could then provide us a link to.

 

by: itsonelouderPosted on 2006-03-08 at 11:08:38ID: 16137117

But I had two users, same name same password on each pc. When the guest account was disabled and i tried to access a shared resource with the appropriate permissions for that account, i was prompted for user name and password but it didn't allow access. I wasn't given a message "access denied", i got no message and no access.

I'm doubting myself now, I'll probably try it again tommorow.

 

by: masnrockPosted on 2006-03-08 at 11:14:52ID: 16137205

You must have Simple File Sharing in use.... that's why. Simple File Sharing makes use of the guest account, whereas normal file sharing does not.

 

by: itsonelouderPosted on 2006-03-08 at 11:21:13ID: 16137286

Simple file sharing wasn't enabled in the above scenario though and the disabled guest account seemed to be restricting access.

 

by: masnrockPosted on 2006-03-08 at 11:24:27ID: 16137322

Strange...

 

by: itsonelouderPosted on 2006-03-08 at 11:27:59ID: 16137366

How do save this screenshot as an image file?

 

by: itsonelouderPosted on 2006-03-08 at 11:34:20ID: 16137429

Here's a link to "Guest account is off"

http://putfile.com/pic.php?pic=3/6613313460.gif&s=x10

 

by: masnrockPosted on 2006-03-08 at 11:42:34ID: 16137519

Yeah, I can see that screen shot.... that only disables access from the local machine.

Go to Tools > Folder Options > View ... just wanna double check the Simple File Sharing (I know you said it's not enabled). Once that's disabled, unshare then reshare the folders. Let us know what happens and show some other screen shots as appropriate.

 

by: itsonelouderPosted on 2006-03-08 at 14:57:23ID: 16139681

Here's my config for simple file sharing, I'll re-test the scenario tomorrow.

http://putfile.com/pic.php?pic=3/6616535629.gif&s=x10

 

by: itsonelouderPosted on 2006-03-09 at 02:56:46ID: 16143024

It's all sorted, sorry I was wrong ;)

If guest account is off permissions are controlled by giving them to the users. Don't know what I did yesterday, obviously a silly mishap of some kind.




 

by: masnrockPosted on 2006-03-09 at 02:59:38ID: 16143033

What counts is you got it sorted out.

 

by: itsonelouderPosted on 2006-03-09 at 03:05:56ID: 16143060

Thanks for your help. I'll split these points 50/50

 

by: itsonelouderPosted on 2006-03-09 at 03:43:47ID: 16143243

Hope that's ok ECNSSMT :)

 

by: ECNSSMTPosted on 2006-03-09 at 06:35:40ID: 16144867

Everything is ok here.  and to echo masnrock.  Best thing is that you got your issue resolved.  Also masnrock saw some stuff I didn't see; so it was a benefit to me...

Regards,

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...