1. Enable the Guest account.
"Control Panel-User Account-enable Guest Account"
2. Install the netbeui protocol.
View "Network Neighbor" properties -- View "Local Connection" properties -- click "Install" -- View "protocol" -- check whether the netbeui protocol exists. If so, install the protocol, if the Protocol does not exist, it indicates that the Protocol has been installed. By default, the Protocol has been installed in WINXP.
3. Check whether the Guest account is disabled in the Local Security Policy settings.
Control Panel -- Administrative Tools -- Local Security Policy -- user rights assignment -- view attributes of "Deny access to this computer from the network" -- check whether there is a guest account in it, delete it if any.
4. Set the shared folder.
If you do not set a shared folder, other machines in the network will not be able to access your machine. There are three methods to set folder sharing. The first method is: "tool-Folder option-View-use simple folder sharing ". After this setting, other users can only access your shared files or folders as the guest user. The second method is: "Control Panel-management tools-Computer Management". In the "Computer Management" dialog box, click "folder sharing-sharing ", right-click and select "new share. The third method is the easiest. Right-click the folder you want to share and use the "share and security" option to set up sharing.
5. Create a working group.
On the Windows desktop, right-click "my computer", select "properties", and click the "computer name" tab to see if your LAN workgroup name appears, for example, "workgroup. Click the "Network ID" button to start the "Network ID wizard": click "Next" and select "the local machine is part of the commercial network and connected to other working computers "; click "Next", select "company uses networks without domains", click "Next", and enter the name of your LAN working group. Here, we recommend that you use "broadview ", click "Next" again, and then click "finish" to complete the settings.
After the computer is restarted, computers in the LAN can access each other.
6. Check whether "Computer Management" enables the Guest account.
Control Panel -- Computer Management -- local users and groups -- users -- enable Guest accounts. The machine can be restarted.
If you want to speed up access to other machines, you can also perform some operations: Control Panel edition-management tools-services-Task Scheduler -- attributes-change the start mode to manual, in this way, you can.
7. user rights assignment.
"Control Panel-management tools-Local Security Policy", in the "Local Security Policy" dialog box, select "local policy-user rights assignment ", in the options on the right, set the Options "Access this computer from the network" and "Deny access to this computer from the network" in sequence.
The "access to this computer from the network" option needs to add the Guest user and everyone; "Deny access to this computer from the network" needs to delete all the rejected users, by default, access to guest is denied.
All the steps of the above method are not required to set the LAN, because some steps have been set by default. However, as long as your LAN is inaccessible, the above settings will certainly ensure the smooth access of the LAN.
******************* ********************
I. How to Create a share:
In Windows XP, file sharing can be performed in two ways: simple file sharing and professional file sharing ).
1. Simple file sharing
It is easy to create a file sharing by using simple file sharing. You only need to right-click the folder and select "share and security ..." Click the "share" tab and select the "share this folder on the network" option. The "Share Name" column displays the name of the file directory to be shared, if you allow users on the network to modify your shared files, you can also select "allow network users to change my files. Tip: by default, Windows XP enables simple file sharing.
If you are not satisfied with the shared folder, you can also share the disk drive. Right-click the drive disk and select "share and security ..." Click the "share" tab. A security prompt is displayed, prompting you to pay attention to the risk of drive sharing. If you want to continue sharing, click the "share drive root" link. The following operations are the same as those for folder sharing.
The premise that shared folders and drives can be accessed is that the shared machine has enabled the Guest account. Generally, the Guest account is disabled by default in the XP system. If network users are allowed to access the computer, you must open a guest account. Expand the "Control Panel> Management Tools> Computer Management> local users and groups> Users" option, right-click the Guest account on the right, and select the "properties" menu item, remove the "Account Disabled" option (figure 4. If the access is not available, most of them are local security policies that limit user access. When a guest user or a local account is enabled, expand "Control Panel> Computer Management> Local Security Policy> User Rights Assignment" in sequence, in the "Deny access to this computer from the network" user list, if you see guest or the corresponding account, you can directly delete it and all users on the network can access it, in this way, users do not need any password for access sharing, and the access is simpler and clearer.
2. Advanced file sharing
In the XP system, advanced file sharing is performed by setting different accounts and granting different permissions, that is, by setting the access control list (ACL) to plan the sharing of folders and hard disk partitions to limit user access.
① Prohibit sharing of simple files
Open a folder, click "Tools> Folder Options" on the menu bar, and select the "View" tab. In advanced settings, remove the "use simple file sharing (recommended)" option.
TIPS: only this step does not enable advanced file sharing. This only disables simple file sharing. You also need to start an account and Set permissions to restrict access.
② Set an account
Opening a guest account alone does not allow multiple users to have different permissions. In advanced file sharing, Windows XP does not allow network users to access the system without a password account by default. Therefore, we must set different accounts for users with different permissions. Enter the user account on the control panel. There are computer accounts and guest accounts.
Generally, the access permissions of network users are the same. In this case, you only need to set one user. In a user account, to create a new user, you must consider network security. The account must have minimum permissions and services, and the type must be set to "Restricted Users ". Click "Control Panel> User Account", click the "Create a new account" link, enter the account name "JJ", and click "restricted" in figure 7, finally, click "create account.
There is also a simple way to add a new account: Expand "Control Panel> Management Tools> Computer Management> System Tools> local users and groups> Users", in the right window, right-click and select the "new user" menu item.
TIPS: by default, the new account does not have a password. Therefore, you must add a password to the newly added account. In the window, select the account name and right-click to set the password. If you want network users to access the system through this account instead of entering the password, you can change the security policy of the XP system:
Open "Control Panel> Administrative Tools> Local Security Policies> Local Policies> Security Options", and double-click "account: Allow console logon only for local accounts with blank passwords, click "disabled" and click "OK.
③ Set sharing
After completing the above work, you can set up sharing. Click the left mouse button on a folder and select the "share and security" item. No, it's different from figure 3, the buttons with more permissions are listed below.
Click the permission button. The default permission is everyone, that is, each user on the network has full control permissions. This setting is insecure, so you need to delete the everyone permission, add the "JJ" permission, and press "add" to find the account name "JJ ", after confirmation, the group and user will be available. Jczx-CD \ JJ indicates the JJ user in the computer jczx-CD. You only need to tick the "read" item to set JJ to read-only.
TIPS: Permission description:
Read Permission: allows users to browse or execute files in folders.
Change permission: allows users to change or delete files.
Full control permissions: allow users to access Shared Folders completely.
Note: When advanced sharing is enabled, all partitions of the system are shared by default and must be changed back.
If you need to set different permissions for different accounts, repeat the preceding steps.
3. quickly create multiple Shared Folders
If you use the shrpubw.exe command to create multiple shared folders, you may need to share Multiple folders on the local hard disk to other users in the LAN at one time. Follow the "simple file sharing" method above to select only one folder at a time, right-click, select "share and security", select "share this folder on the network", and then confirm. However, it is too cumbersome to share Multiple folders.
In fact, Windows XP already has a small one named "mongoshrpubw.exe ".ProgramIt is much easier to use. The method is as follows:
When the dialog box is started, enter the authorization command in the Operation window, enter "mongoshrpubw.exe" in the displayed dialog box, and press the Enter key.
② Now you enter the create shared folder dialog box. Click "Browse" to select the folder to be shared, set the shared name and description of the shared folder, and click "Next" to set the permission.
③ Set the share permission for shared folders. Of course, you can also customize the share permission. You can set it according to your own situation.
④ After creating a shared folder, the system will ask you if you want to create another shared folder. Select "yes" and return to the creation page in step 2 to select a new shared folder. Select "no" to exit the creation of the shared folder.
Use the shrpubw.exe command to set multiple shared folders.
Ii. Management and sharing
1. view the created shared folder
Expand "Control Panel> Administrative Tools> Computer Management> shared folder> sharing" to see which shares are available on the local machine.
What if you want to view what is shared on the LAN and view the shared files on multiple computers through "Network neighbors? With the "landiscovery" software, the software is only 1.0 kb. The most important thing is the free software. The current version is 2000, applicable to Win9x/NT/xp. Click Download.
Landiscovery software is easy to use. After the software is installed, double-click the "landiscovery" icon on the desktop to run the software. When the software is running, it starts to automatically scan computers in the LAN and gradually display them on the left side of the software window. You only need to select the computer name of any of the computers, on the right side of the software window, the shared file directory of the computer is displayed immediately. Click the shared file directory to open the Directory and use the shared file.
You can also enter the CMD command in the "Start> Run" window, and enter the "net share" command in the displayed running dialog box to view shared resources.
2. Check who connects to the local machine?
Expand "Control Panel> Administrative Tools> Computer Management> shared folder> session" to view the users connected to the local machine. Right-click the user name and select "close session" to disconnect the user.
In addition to the above method, you can view shared documents accessed by users on the LAN, and you can use the tiny software movie watch, just as it is called "share ". The software is only 77kb, applicable to Win9x/NT/2000/XP/2003. Click Download.
After the software runs, you can see the local shared directory and the LAN User WJJ-er accessing the directory.
Right-click the shared directory and choose Properties to display the local name, shared directory name, number of user connections, and allowed access permissions. Click Refresh) refresh the local shared directory. You can also press F5 to refresh the directory in real time. "Stop sharing" cancels the permission to share the current directory and disconnects the user.
3. Delete sharing
To delete a shared file, right-click the folder and select share and security ..." Click the "share" tab, and remove the marker before "share this folder on the network, after you click "OK", the file directory cannot be shared on the LAN.
You can also use NotePad to create a batchcompute file with the suffix bat. In this file, enter the command in the following format:
NET Share ADMIN $/del
NET Share IPC $/del
NET Share C $/del
NET Share d $/del
If there are other drive letters or folders shared, you can add them in sequence.
Add the created batch file to the system's "task plan" and select "when the computer starts" in the task execution option ". In this way, the system will automatically run the batch processing file after each boot, closing the specified default shared service. If you do not want to use "schedule task", you can also drag the shortcut of the batch file to the "Start" menu to achieve the same purpose.
Iii. Stealth mode for file sharing
What actually threatens your own information security in the LAN is not a hidden hacker, but a "person" around you ". Because files shared by network peers are widely used in the LAN, in order to better protect yourself, you need to hide large methods to prevent internal malicious attacks when sharing files.
1. Hide Shared Folders
Do not think that adding a password to the shared folder can ensure security. There are too many windows system vulnerabilities. Do you know which patch is not completed in time? It's too dangerous. It would be much safer if someone else could not see your shared files from their network peers.
Implementation Method: Right-click the shared folder to be hidden, click the "share" tab item, enter the name of the shared folder in the share name, and add the dollar sign "$" to the end ", for example, "Shared File $", and then enter the password. If someone else wants to access your shared files, they will not be able to see them in the network neighbors. You must enter "\ computer name (or IP address) \ shared file $" in the address bar ", enter the password and press enter to access your folder.
2. Sharing without a shared sign
If one day he finds that there are still shared files on your computer, that is, shared folders have a special sign to be shared, and there is a little hand under it, which is obviously different from general folders! How can I remove the small hand icon of the shared folder so that the shared folder is the same as the normal folder, and outsiders no longer see which directories are shared and which directories are not shared, so that security is more guaranteed. The following describes how to share an edisk without a shared Tag: first, use the "Hide shared folder" method to hide and share the edisk, and then open the Registry Editor, enable "HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Network \ LANMAN \ e $" in sequence, and change the key value of DWORD "Flags" from "192" to "302 ", restart Windows to make it take effect. If you need to access the disk, you only need to enter "\ computer name \ e $" in the address bar to view the shared content of the disk. At the same time, you will find that the E disk cannot be shared in the local resource browser, isn't it amazing? No one except yourself knows this secret.