Link to home
Start Free TrialLog in
Avatar of efield
efield

asked on

How to give access to shared folder but nothing else in W2K domain for non-domain users/computers.

What is the best solution to this problem:
An office with several companies which share a network printer and Internet access.  One of the companies - Company A - keeps its data separate from the others by running a Windows 2000 Server domain with one server and several member computers.  The computers in the other companies are in separate workgroups and they do not have user names or passwords for the domain or the domain computers.  The server runs Windows 2000 Server and the workstations run Windows 2000 Pro or Windows XP Pro and Home.  All of the computers are on the same network segment/subnet.  

Company A needs to share one folder on their domain server so that the people in the other companies can access it from their computers.  However, this is all the access/privilidges they should have.  They should not be able to access any other shared folders on the server, and they should not be able to log onto any of the computers in the domain.  They should be required to enter a password when they connect to the shared folder.  

Will the Guest account or Anonymous access give them more privilidges than they need?  Is it possible to create an account which they can use and lock down the account so they can't do anything else with it?  

Thanks very much.
Avatar of Kevin Hays
Kevin Hays
Flag of United States of America image

I would stay away from the guest account or even using anonymous access for the shared folder.  Basically I would use a locked down account such as a "user" only.  Since they are on a workgroup they will have to authenticate a little different than if they were on a domain.  If you can get the login prompt to come up when the workgroup users try to access the shared folder then they can just use the locked down account to authenticate and get to the share.

It's so much easier if they are all on a domain though :)

kshays
Avatar of efield
efield

ASKER

What would the locked down user account look like?  What are the minimum privilidges it would need to access the shared folder?  It would only need read-only permissions in the folder.
ASKER CERTIFIED SOLUTION
Avatar of Dave_Hunt
Dave_Hunt

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial