Windows File Share Summary

Environment: Windows XP systems, VMware virtual machines, workgroup environments

Learning Purpose: Understanding Windows file Sharing settings

Basic concepts:

• File sharing: Publish your own files to the network for sharing purposes

• Access: How do people access shared files? The visitor sends the shared Host account and password to the shared host's local account database for verification.

• Permission settings: There are share permissions, NTFS permissions, and the two are different systems. A collection of minimum permissions for which the user has final permissions of 2.

• Group Policy configuration: Use Group Policy to restrict user logon rights and whether to turn on Guest account login

• Group Policy, User Rights Assignment sets which users can have network access with local access , set items to access this computer from the network, log on locally, deny local logons, deny access to this computer from the network. Security Options Set whether the network Access user mode is a local account login or an own Guest account.
  

Actual operation:

• The process of sharing files

  1. Create a new shared folder

  2. Set up user account information

  3. Permission settings

  4. Configure Group Policy

• Different user rights, display user login

  1. Remove the Everyone user, add the specified user

  2. Permission settings, set the sharing permissions, if the sharing permissions do not meet the use of security settings.

  3. Group Policy setting: User Rights Assignment: Adds the specified user or group of users to the computer from the network access, removing the user or user group from network access. Security options: Network access-local account sharing and security mode-Classic

  4. Result: Users can access the shared file by entering the corresponding account to get different permissions

• Use Guest account, do not display user login

  1. Set sharing permissions to everyone user

  2. Group Policy settings: Add everyone to the From Network access computer, and remove everyone from the Deny network access. Set Network access-local account sharing and security mode to guest only, start Guest account (Computer Management-user and user group), account-local account with blank password only allow console login to disable

  3. Result: User does not display user logon direct access

• Other Notes:

  1. If the visitor's account password is exactly the same as the share's account password, the login will not be displayed.

  2. The guest is used to set the same access rights, the user is the Everyone

  
  

  
  

  
  

  
  

Windows File Share Summary