I apologize for the wording of this message - This is something that I have
never worked with and am hoping to get some answers or additional resources
(preferrably step-by-step resources) regarding this.

I have set up a small network (Workgroup) recently with the following
attributes:

Computer A:
* Windows XP Pro
* The users available on the welcome screen include "SERVER" and "Guest"

Computer B:
* Windows XP Home
* The users available on the welcome screen include "Workstation1" and
"Guest"

Computer C:
* Windows XP Home
* The users available on the welcome screen include "Workstation2" and
"Guest"

All computers are part of the same workgroup name of "Workplace." All
accounts (except Guest accounts) are set for Administrator Access.

What I wanted to do is to set up three folders on Computer A (The Server):
* One folder would be a shared folder for any network user (mapped as a
drive letter on Computer B and Computer C). I have done this part by
creating a folder called "SHARED" within the Shared Documents folder on the
Computer A (The Server). This allows for all workstations to share files
between each other.
* One folder for each workstation whereas only the respective workstation
can see the files within the folder. For instance, I want one folder called
"Workstation1" so that ONLY the Workstation1 user can see the files, and
another folder called "Workstation2" so that ONLY the Workstation2 user can
see the files.

So far, here's what I have done:

- I have created a folder called "SHARED" in the "Shared Documents" folder
on Computer A (The Server), shared it for "Everyone." This shared folder has
been mapped to drive letter "S" onto both Computer B and Computer C. This
works just fine!

- Also under the "Shared Documents" folder on Computer A (The Server), I
have created another folder called "USERS" with subfolders under that folder.
One folder is called "Workstation1" and the other is "Workstation2."
Currently, these are shared to "Everyone" because it will not allow me to
specify any specific users outside of Computer A. Currently, I have mapped
the "Workstation1" folder as drive letter "L" on Computer B (where the
Workstation1 user is), and I have mapped the "Workstation2" folder as drive
letter "L" on Computer C (where the Workstation2 user is.) This works ALMOST
perfectly except for one detail: The user Workstation2 can go the "back
route" and get into "Workstation1's" folder if he wanted to, and vice versa.

Is there a way to make these folders only work for their respective users?
I suspect that this will be a long process to setup, but I'm not even sure
what kind of process this is called.

I have tried to enter the Permissions on each folder, but when I type in the
user's name, it kicks it back saying that it is an unknown object. When I
try to locate the users (Workstation1 and Workstation2, both located on
Computer B and Computer C respectively), I can't seem to find them. The only
computer I get to search for "Objects/Users/Groups" is the local computer,
Computer A.

I have even tried to type in the computer name with the user's name (i.e.
"Computer B\Workstation1") into the Allowed Objects box manually, but it
wouldn't take it.

I don't mind if the "SERVER" user on Computer A can see all of the files - I
would like this user to be able to backup the data in both of these folders
anyway. I can do this now just by backing up the "Documents and Settings"
folder on this computer.

Any ideas on this one? Where should I start?

Thank you in advance!!
Ronny Hamida

I would suggest creating a separate sharing area, outside of the
user-profiles, perhaps C:\shared.

Under this, create the folders you want to share.

Then add the user-accounts of all your network-users to the server.

Create a couple of new user-groups for each level of access, and add the
appropriate users to each.

Share each of the folders, and under the share-permissions, remove
"Everyone" and replace it with the appropriate group.

If the accounts on the server have the same password as the accounts on the
workstations, the users won't be asked to authenticate twice.

You dont have to bother with groups, you can add the users directly to the
shares, but groups do make things easier to manage as requirements change.

To access the shares you could make them permanent mappings, or you could
use a batch-file to connect them at startup, of the form:

net use H: \\servername\openshare /persistent:no /yes
net use J: \\servername\restrictedshare /persistent:no /yes

which I find more reliable.

Hope this helps, Ian.