2007-03-27 – This article is very old and I’m republishing it as it was, without any edits. At the time I was a youngin’, so please accept my apologies in advance 😉

As I found out yesterday, sharing folders on Windows XP using Simple File Sharing is like leaving your back door unlocked while you’re upstairs. This article discusses ways to make folder shares secure on Windows XP Home and Professional by allowing the use of user and group permissions.

Simple File Sharing – Why it’s a pain

Simple file sharing is, just as it’s name suggests; simple. It doesn’t concern itself with who can or can’t get at your files, nor does it distinguish between who you want modifying your files and who you’d rather not. This is fine on your personal home network, as it’s safe to bet you trust the people who’re using it. Not so on an open network, such as a company’s, or indeed an academic one.

Looking at it from a users point of view, it gets the job done. From an administrator’s point of view it’s pretty messy – It doesn’t take much for a disgruntled employee to poke around in the R&D departments shared files before they find something they’re competitors (and soon to be new employers) may be very interested in. And finally from a geeks point of view it really is incredibly frustrating being told by Windows I can’t control access to my PC.

XP Home Vs XP Pro

As we all know, XP Home is aimed at, well, home users. Only a lot of people using it aren’t your typical home user; they need the flexibility to be able to control access to their files on the network. Having used XP Pro at home, I was disappointed to find that Home won’t let you turn off simple file sharing.

With XP Professional, the options to enable permissions and get rid of Simple File Sharing are there, they’re just not in the most obvious of places.

So, onto disabling SFS and getting control of your PC back.

Setting Share Permissions for XP Pro

The solution for XP Pro is relatively simple:

My Computer » Tools » Folder Options » View Tab.

Go right down to the bottom of the list, and uncheck Use Simple File Sharing (Recommended).

Now go back to your shared folder’s properties

Right Click on Shared Folder » Sharing and Security.

You are now able to set permissions. Hooray!

Folder Sharing Permissions on XP Home

XP Home won’t let you turn off Simple File Sharing like on XP Pro, so we have to go around it. To allow you to set permissions on your shares follow this:

Start » Run » Type ‘shrpubw’ into the box and hit OK.

A nice menu now appears allowing you to specify what you want to share, and to describe it.

Click next and the following options are fairly self explanatory. however, remember that with XP Home ‘Other Users’ is usually the Everyone group which includes the Anonymous group.

If you wish to prevent anonymous access and properly lock down your permissions, you should choose Custom, delete the ‘Everyone’ entry and add the groups and users you want to control access for.

Final Thoughts

I mainly use XP Pro at home, so to be honest I didn’t even know of the ‘shrpubw’ method until yesterday, whilst searching for a way to control Share permissions on my XP Home Laptop. So, if you found this article useful, please, please, please pass the link on to others who you think might benefit. After all, knowledge is power and all that.

Phil

Written by Phil Wiffen

Phil is an IT Professional working in Cambridge, England. He generally blogs about useful solutions that he comes across in his work/play.

8 Comments

Bruce

For those trying to figure out how what
“Start » Run » Type ’shrpubw’ into the box and hit OK.”
means, here ya go.

Start, run, type shrpubw.exe into box and hit ok.
It starts a folder sharing wizard.

Phil Wiffen

Thanks for picking up on that Bruce. It seems the formatting on the text went very weird and garbled. I’ve now modified the source so that it should display properly!

Phil

Nice article, but it didn’t work for me.

The Wizard did show up, and I was able to configure the permissions, but when I’m trying to access the shares, it says that I do not have the autorization.

What Service Pack was installed when you tried this thing? I’m on SP3.

LM

FYI, I tried it on WinXP Home SP3 and it works for the documents folder for user accounts with admin rights (i.e. C:\Documents and Settings\username1 where username1 has admin rights on the system), but it fails where the user has a limited account. Anyone know a work-around?

LM

Opps, I got it wrong! After some more trial-and-error I found it was not admin vs non-admin account. It is the _first_ account created can share the c:\Documents and Settings\username folder but nobody else can whether they are admin or not.

In summary: Install XP Home using account name “Bob”. Create a second account with admin rights called “Admin2”. Create a third account with limited rights called “LimitedUser”. Share the folders for each of these under “C:\Documents and Settings” by using shrpubw.exe as described above. All uses can access “c:\Documents and Settings\Bob” but none of the users can access “c:\Documents and Settings\Admin2” nor “c:\Documents and Settings\LimitedUser”.

vanessa

Yeah! i also had try this in SP2, but it’s NOt working. sigh… ANy other way to do?

fernando canto

agradesco mucho tu ayuda me sirvio mucho, ya que estaba acostumbrado a utilizar windows 7 y ahora que tengo una maquina con windows xp, tenia problemas para saber como lo hago, gracias.

Funciona y muy bien….

Comments are closed.