Lan sharing permission settings and specified IP settings

From: http://apps.hi.baidu.com/share/detail/22060893

 

1. How to assign shared permissions and set an access password for LAN users?
2. How can I disable a specified IP address from accessing shared files on my computer in the lan?

How can I assign shared permissions to LAN users and set an access password?
How to Set a Windows XP shared folder with a password

Colleagues from other departments of the Organization asked me a question: some information in his computer (Windows XP protocol sion) is expected to be provided to a user in another department, this user is only allowed to share these resources, but after the directory is shared, all the computers in the LAN can see the information, and he immediately canceled the sharing. Is there any way to add a password to the shared folder like Windows XP and Windows 9x/me so that only authorized users with the password can share these resources?
I checked it out in front of his computer and found that Windows XP Network Sharing has changed. The simplicity is really simple, but it is not safe, only shared folders can be set to read-only or "allow network users to modify my files", so that any computer can set shared resources, all computers on the same network with this computer can share resources on this computer through "Network neighbors" without any authorization. After some exploration, it is found that the default share during Windows XP installation is "simple sharing", resulting in "open" and insecure file sharing. The method to change this "simple sharing" is:
First, cancel the default "simple sharing ". Open "my computer", click "Tools> Folder Options", select the "View" tab in the displayed dialog box, and clear the check boxes before "use simple sharing (recommended.
Then create a shared user. Click Start → settings → control panel. Open user account and create a user with a password. If the user name is user00, the machine that needs to share resources must share resources with this user.
Next, set the directory to be shared (assume that the shared directory is test1 on the NTFS partition), and set that only user00 can share resources in the directory: right-click the "test1" directory to be shared, click "share and security", select "share> share this folder", and click "Permissions ", click the "delete" button to delete the permissions that can be shared by any user (everyone) in the original directory, click the "add" button, and then click "Advanced> Search now ", select User user00, click OK to add user user00, and select user user00 sharing permission (1 ).

Figure 1

In the future, if a computer in the LAN wants to view the content in the shared folder, you must enter the correct user name and password to view or modify the content in the shared folder.

In Windows NT/2000/XP/2003 systems, because they support the NTFS file system, when using the NTFS partition format, there are much more shared configuration items, it is extremely flexible in actual use. The setting method is to right-click the folder to be shared, select "share" (or "share and security"), and select the "share" tab in the file Properties dialog box. Select "share this folder", click "permission", add or delete users or groups as needed, and grant different permissions to different users or groups.
Note:
When users must be set to have the same access permissions, they can be added to a specific user group. To set the sharing, you only need to set the group directly, you do not need to set them one by one. In Windows XP, related settings cannot be found by default, because it uses the "simple file sharing" feature by default, you must cancel this feature to see the detailed sharing settings. Run the "Folder Options" command in the "Tools" menu of the resource manager. On the "View" tab, find the "use simple file sharing" option to remove the selected file, click OK to display all sharing settings.

In the LAN, how does one disable a specified IP address from accessing shared files on my computer?
Use an IP policy to prevent the IP address from accessing any of your ports.
Below is the method:
You are using XP. It should be. I use XP!
Open Control Panel-Administrative Tools-local security settings. Click the IP Security Policy on the left side of the page on the local computer.
Right click on the right and choose create IP Security Policy to open the IP Security Policy wizard.
Next, the IP Security Policy Name appears. Just start it. For example, block 192.168.1.163.
Next, the default response rule is activated. Do not select the rule and remove the hook.
Next, select Edit attributes.
Then, the IP Security Policy attribute is displayed. Click Add next to the rule attribute. Click Add to display the IP policy list. Remove the wizard and click Add on the right to display the filter attribute.
In the addressing column, select a specific IP address 192.168.1.163. The target IP address is my IP address. Click OK.
Return to the IP Filter list and click "OK". A list should be added to the rule attribute and selected. Switch to the filter operation tab, remove the wizard, and click Add. On the Security Measures tab of the filter action attribute that appears, select block and click OK. In the filter action tab, a blocking option is displayed. select it.
In short, in the IP Filter list, select the list you created, and in the filter operation, select block. Click the application and close it.
Go back to IP Security Policy attributes, hook up the IP Filter list you created, and click Close.
At this time, an additional policy will be added to the local security settings you first opened, which is the one you created.
"Block 192.168.1.163 ". Right-click it and select assign.