Best option for remote user to get direct access to folder on server?

depends on what type of security you want... If you want the user to just have access to the file you can "share the folder" and have them map to it with pass, etc... you can do ftp and that folder will look like a drive, etc..

as far as modify, they would actually have to download the file, modify it, then re-upload it using ftp... the shared folder would allow modification right there

Ok then ftp isn't really what I'm looking for. "the shared folder would allow modification right there".... how would I go about doing this?  Security is also a big priority.

If your not using active directory:

1) Create user accounts for people that need access to the folder.  Make these accounts on the machine that will hold the folder.

2) Create a folder on the drive you want to be the "server" or the machine sharing the file.

3) Right click the folder and go to teh security tab.  Here you can set the permissions for the users.  Add the users to the list and select what kind of rights they will have.  

Note:  If you have alot of users, you can make a group.  Give the group access to the folder and then place these users into the group.  This will let you easily give people access to the folder and keep everything a little tidy.

MFredrin... you will have security just fine using shared folders so long as you set the accounts and permissions.  Savone did just fine in explaining the setup.   You can give read only, modify, delete, etc priveledges with shared folders

Thanks guys... I understand how to create a user, security and all that. But how do I actually share the folder to the remote user? Can I do that?

Right click on the folder- properties- sharing

choose to share the folder

Don't worry too much with the share permissions.   When sharing files, there are two types of permissions share and NTFS (those on the security tab).  I always set share permissions to allow everyone access then I use the NTFS permissions to actually control who has access and what type of access they have.  It has been described above how to do this.

OK I understand all the permissions and sharing the folder.... but how is the remote user going to access the shared folder? Thats what I'm trying to figure out.  Someone mentioned sharing a folder instead of using ftp. Fine I can do that but how will the remote user get access to the folder? Theres gotta be more to it then just sharing a folder.

your ip address or computer name..



\\insysfile01\   if it's named INSYSFILE01

\\127.0.0.1\   (if the ip of that machine is 127.0.0.1

etc...

once you go to the other machine and type in

\\(yourcomputername)\

you will see any available shares, then they have to connect to the share and can map it as a network drive under their username/permissions given

I think your talking if the user is on the network. I'm talking sharing the folder over the internet. Thats what I mean when I say remote user.  So say a user that wants to work from home. Is that possible?

In that case, just have to use the external ip addy of the machine you are talking about

So I could just do something like this then?  \\external ip\share name ?  Ok that sounds easy enough... I'll let you know how it goes. Thanks

no problem..  can do \\external ip\ and will give you the shares available to it there



can also do "net use F: \\external ip\sharename" to map the drive to local machine etc..
Would give a mapped drive as F: on their local machine to the share you have for them

Awesome!  JimsZ, could I also create a script to map the drive automatically? If so could you point me in the right direction to do that?

I just tried connecting by doing the \\ipaddress\.  It gives me the error "Windows cannot find \\66.60.X.X\ . Check the spelling and try again... blah blah."  Is there a port I need to forward to the server on the router?

port 139 forwarded to that machine should do it

I forwarded that port. I went home, tried to connect but couldn't. I can't seem to ping either. But terminal services and my vpn connection to that ip work just fine from that remote computer. Got any ideas?

you have a vpn connection through the router?   Then you should be able to just vpn in, then see the share by either the internal ip address, or the computer name.  

Is netbios installed on that machine?

Is netbios installed on the server? I believe so but how could I check?  I will be using a different machine with out the vpn connection to do this. I don't want to have to worry about dialing in all the time for this remote user.

did you try to connect to that share while you "were at work" ?  Just to make sure that share is even showing ?

The share is working when I got threw network neighborhood or type in \\servername\share... or \\serverip\share .  But when I type \\externalip\share it gives me that error.  So its not working by using the external ip even tho I have port 139 forwarded to the server ip.

netbios uses a few ports in that range, it could be hitting another port...

could be 137, 138, 139

are you anywhere to where you could connect into the router and forward 137, 138 as well ?

I forwarded ports 136-140 for the hell of it. Still get the same deal. When I just type the ip in without the \\ it brings me to the router setup if that helps at all. Otherwise its still doing the same thing... just giving me that error.

I was doing some reading and found out the the Netbios port for windows 2000 is 445. I forwarded this port to the server but still get the same trouble.

I forwarded port 80 to the server as well and I can pull up the intranet just fine from home. So I can connect to the web server, terminal services, & vpn server just fine but still cannot get to my shares!  Any other ideas?

do you have NWLink IPX/SPX/NetBIOS Compatible Transport Protocol installed at home?  Can you connect to other shares off your home pc?  If you don't have NetBIOS installed at home, that would be a big reason why you can't connect.  Plus, don't VPN in if you are trying from home, just connect over internet.

I don't think I have it installed at home. Isn't that for Novell Net Ware tho? Anyways I installed it here at work and still get the same deal. No go.

it's for the netbios protocol.  I thought you told me you could see the share just fine from work connecting locally?

I can see the share if I go threw network neighborhood. Or type in \\servername\share.... but I can't type in \\outsideip\share and see it.  NetBios is enabled on the server connection... is there any need to install the NWLink IPX/SPX/NetBIOS proticol on the server connection?

then that is a problem with your routing...  The share is available, you're just not forwarded to the share.  Can you browse the share by using "interntal ip adressing" ?  \\192.168.0.2\ figuring that is internal ip address...

yeah I can use the internal ip with no problem.

have you done a netstat on the machine to see which ports it's listening to?


netstat -a

It doesn't list the netbios port (445) but it does say domainname:netbios-ssn  Theres a bunch of them... then computer names are listed after. Ex.  TCP beefserv:netbios-ssn   Server.domainname:0     LISTENING

try netstat -a -n

It shows that the server is listening and has connections established on the netbios ports 135 and 445.  

what port is it listening on... change your router to listen to that port

It's listening on ports 135 and 445.  I already have these ports forwarded on the router to the server ip.

Any other ideas JimsZ??

Ok, so you can VPN into the network.

map the drive like this


net use X: \\INTERNAL SERVER IP\SHARE /persistent:yes

err port 135, sorry :)



AC

BILJAX -  This remote user will not have vpn access. Can I setup websharing so he can just type \\externalnetworkIP\share and access the share instead of having to vpn into the network?

you could, but that is a BIG BIG security risk.

hmmm.... so you would recommend vpn? Is there any easier way? I just want to be able to have the remote user access the file, quickly, and without having to worry about the hastle with ftp. Any other recommendations? Thanks for the help.

Could I do this threw my website? Using web sharing? If so, could you point me in the right direction. How do I set up a link and security for that?

How about setting up a web folder? Do you have any information on doing this?

I figured out the web folders thing. This is exactly what I wanted. And it used the server security. I just created a username for the remote user, gave the appropriate access and it seems to work great!

Excellent, I'm glad that helped.