How can I set Microsoft Account permissions for shares without regards to domain on Windows 8?

09
2013-11
  • Daniel

    I have folder A on computer A and I am mapping network drive on computer B to \VPN_IP\A, but I want full control permissions to the share from computer B. Both computers use the same Microsoft Account to log in, but there is no concept of domains. How can I set share permissions based on the Microsoft Account instead?

    • Answers
  • Guy Thomas

    Shares have properties. (Right click)

    Included in the properties you should see a Sharing Tab, and an Advanced Sharing button. From there you can adjust the permissions.

    Incidentally, my share permissions were Everyone Full Control.

    In summary a) Believe it's possible. b) If necessary use remote desktop to computer A. c) Drill-down until you find the permissions settings.


    • Related Question

    file management - My account is in administrators group, but doesn't honor permissions for administrators group on remote share?
  • Ryan Peters

    I am on a home network and not using a domain controller. My username is in the administrators group and I have UAC turned on. I have a share on a network computer that has certain rights for users of the administrators group (the group itself has permissions). However, I find that it is not honoring those permissions, but have to explicitly add my username to this ACL in order to have access.

    Why won't this work, since both usernames are under an administrators group? Does this not matter the group when accessing a remote share or does it only authenticate at the user level? Thanks.


    • Related Answers
  • soandos

    The most restrictive permissions are followed. So if there is a denied for your account, but allowed for administrators, you will be denied.

  • KCotreau

    You need several things:

    1. Since it is not a domain, and thus not really one user, you need the user AND password to be the same on both computers. This allows for pass-through authentication.
    2. You need to set the Share's permissions to allow access, usually full for the administrator, and do it not for the administrator's group. I suspect this is where you are failing since the administrator on computer 1 is not really in the administrator's group on computer 2 since they are different users.
    3. You need to set the security permissions on the files. Again, I would set these permissions for the individual administrator user.

    As noted by soandos, the most restrictive permissions will apply, so if you only have read on the share permissions, it will not matter if you have full control on the security permissions.