Mekaziah

How to share files in WinXP
-=-=-=-=-=-=-=-=-=-=-=-=-=-

Windows XP comes with some default settings which deny people the right to access your computer by a network. I'm guessing it was because of people with broadband connections were sharing with their neighborhood. WinXP will allow you to share files default, but they must login. This is a pain in the ass with 9x machines since they have to login with the user/pass you define here. If you have two or more XP machines on the network you have to have the same password for both. The following steps will allow you to setup XP so any Windows machine can access it without a password.
*** These steps were preformed and tested with WinXP Professional

1. Enable the guest account
---------------------------
Right-click on My computer and choose manage
Expand "Local Users and Groups"
Click on "Users"
Double-Click on Guest
Uncheck the box that says "Account is disabled"
Click OK
Right click on Guest and click Set Password
Click Proceed
Click OK without typing in a password
Close Computer Management

2. Allow Guest to access the computer from a network
----------------------------------------------------
Open Control Panel
Open Admistrative Tools
Open Local Security Policy
Expand Local Policies
Open User Rights Assignment
Double-Click on "Deny access to computer from network"
Click on Guest, and click remove
Click OK
Keep Local Security Settings up for the next step

3. Allowing Anonymous Users connect
-----------------------------------
(Assuming you left off at step 2)
Open Security Options
Double-Click on "Network access: Let Everyone permissions apply to anonymous users"
Choose Enabled
Click OK


You should be ready to go. I dont know if all these steps are nessicary, but they have worked for me with great success. One thing worth mentioning is if you try and access a machine with an existing username (Administrator) then it will prompt for a password. In NT/2k/XP just put in another username to connect with. The computer will recieve it, and give you anonymous (Everyone) permissions since it cannot be verified. If you are in 9x/ME and try to access a computer with an existing username and the password you are using on your box is different from the box you are connecting to it will fail. It will not give you the opportunity to connect with another username. You will need to log off, and choose/create a new username that does not exist on the XP box.

Another thing, when you share files in NT/2k/XP local security permissions take precedence over network security permissions. I didn't know that for the longest time, and it is worth mentioning. If you share out a folder for "Everyone" with read only access, then make sure locally they have the same access. If you move files from your desktop, most likely they will be private for you. You can share them in a shared folder, but when you try and access them from a remote computer it won't let you.

Hope this helps!

heyal256

I'm not sure if you are aware of this option (relatively hidden), but as long as the username/password has access on both machines, you can share files using blank password (I do this, and it's a little more secure, and less hassle then using the gueast account in my opinion).

under control panel - administrative tools- local security policies
security settings - local policy - security options
you will have to disable "accounts: limit local account use of blank passwords to console logon only"

This setting along with setting adding the user/password of the accounts that need access to the particular files has allowed me to share my files across a win2000/xp network.

This is most useful for those of use that prefer to use blank passwords for our home computers.

FloydianOne

So right now I have a router connected between me and my college's local area network... meaning when I share folders my friends directly connected to the college lan dont see it. Is there a way to passthrough lan traffic to your router... so we could share files etc. etc.?

Pragma

You need to forward the proper ports from the internet to your computer. The ports are 135, 137-139, and 445 (all TCP) as well as 137-138 (UDP). There might be more, I just can't remember at the moment and a quick google is failing me.

This will let your friends connect to your computer's share by going to \\your.ip.address.here, but they'll still need a username/password to be authenticated.

ScottKuma

FloydianOne: If you're going to do this, I would highly recommend using a password, or at the very least not allowing people to write to your system. Many worms/virii spread by looking for unprotected windows shares.

Also remember that if you are sharing files like MP3s, you are opening yourself up to litigation. At least if you have a password on the share, you can say "I opened this for MY use only -- and you must have hacked my system to get access!" Kinda analogous to having a search warrant to search a house with closed/locked doors.

heyal256

I would think that either putting a pc in the DMZ (if possible) would bypass the issues of with the router. Of course this is about the same as taking the router out of the equation (and giving up the security from the router). Perhaps forwarding the proper ports and setting up a ftp server (with user/password) would be better in this situation?

FloydianOne

OK so i did the port fowarding and when I try to connect to my ip address it works but it brings up a password box with the username locked to "Guest\JasonF" and password blank which i thought should stay blank but it doesnt log in. Where can i setup the user accounts and make it so its not locked on Guest?

Anyone?

mikec

guest accounts and anonymous users.........a recipe for disaster!!!

__________________
Until the 20th century, reality was everything humans could touch, smell, see, and hear. Since the initial publication of the charted electromagnetic spectrum, humans have learned that what they can touch, smell, see, and hear is less than one millionth of reality

spived2

I just set the permissions for the shared folders to allow access to two groups: the Local Admin group and then Everybody, but only specify the Read & Execute, Read, and List Folder Contents for the Everybody group. That way as long as they're on the same domain or workgroup, they can copy all my files that are allowed in accordence to the parent folders permissions.

__________________

"This visage, no mere veneer of vanity, is it vestige of the vox populi, now vacant, vanished, as the once vital voice of the verisimilitude now venerates what they once vilified. However, this valorous visitation of a by-gone vexation, stands vivified, and has vowed to vanquish these venal and virulent vermin vanguarding vice and vouchsafing the violently vicious and voracious violation of volition. The only verdict is vengeance; a vendetta, held as a votive, not in vain, for the value and veracity of such shall one day vindicate the vigilant and the virtuous. Verily, this vichyssoise of verbiage veers most verbose vis-à-vis an introduction, and so it is my very good honor to meet you and you may call me V." - V