asked on

Prevent Network access from a machine that others are using as file server

I have a small workgroup of Windows 2000 and XP machines. We've added a Windows XP Pro machine to the workgroup called Sor1. I want to allow other users on their computers to access files on Sor1 but I don't want the person using Sor1 to have access or even see the rest of the network. Is this possible on a Workgroup? Any advice how to do it? Thank you.

Regards,

Applejac

msice

Just create the same accounts and passwords for all the other users on all the computers except the one you don’t want to have access just give him one account on Sor1 and make him a user. Then you can hide the other computers by setting this in the registry:
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoComputersNearMe
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

see more here:
http://www.winguides.com/registry/display.php/542/

msice

to clarify "setting this in the registry" on Sor1 - sorry

Applejac

ASKER

When you say "Setting this in the Registry" do you mean that I add another DWord Value?

ASKER CERTIFIED SOLUTION

msice

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Applejac

ASKER

MSICE,

As I understand your answer, you suggested that I go into the registry and modify two areas:
HKEY_Current_User and HKEY_LOCAL_MACHINE by adding a new DWORD value -- NoComputersNearMe -- and assigning this a value of 1.

Question 1: I don't have a choice of "Explorer" in this particular HKEY_LOCAL_MACHINE. Can I create it?
Question 2: Is this a Decimal or Hexadecimal number (and does it matter?)

Greatly appreciate your assistance.

msice

Did you get it? here is another link if you need it http://windows.about.com/library/tips/bltip009.htm

Applejac

ASKER

Finally got it. I realized a few things doing this. First, only an adminstrator can make these registry changes. But the user I'm trying to prevent seeing too much wasn't an admin so I was mistakenly doing it under my own account. So I had to change their account type, login as them, make the registry changes, and then modify their account type. Now it is working. Now I'm on to the next question. Thanks for all of your help.