Windows 7, network shares, and authentication via local group instead of local user
- by Donovan
I have been doing some troubleshooting of my home network lately and have come to an odd conclusion that I was hoping to get some clarification on.
I'm used to managing share permissions in a domain environment via groups instead of individual user accounts. I have a box at home running windows 7 ultimate and I decided to share some directories on that machine. I set it up to disallow guest access and require specifically granted permissions. (password moe?). Anyway, after a whole bunch of time i figured out that even though the shares I created were allowed via a local group i could not access them until i gave specific allowance to the intended user. I just didn't think i would have to do that.
So here is the breakdown.
Network is windows workgroup, not homegroup or nt domain
PC_1 - win 7 ultimate - sharing in classic mode - user BOB - groups Admins
PC_2 - win 7 starter - client - user BOB - groups admins
PC_3 - win xp pro - client - user BOB - groups admins
the share on PC_1 granted permission to only the local group administrators. local user BOB on PC_1 was a member of administrators. Both PC_2 and PC_3 could not browse the intended share on PC_1 because they were denied access. Also, no challenge was presented. They were simply denied. After adding BOB specifically to the intended share everything works just fine.
Remember, its not an nt domain just a workgroup. But still, shouldn't i be able to manage share permissions via groups instead of individual user accounts?
D.
