jp2*_*ode 6 windows security file-sharing
在我们家里,我们有大约 5 台 PC;没有 DHCP 服务器或 DNS 服务器。
我们有一些便携式备份驱动器(Western Digital WD1001FALS 1 TB 驱动器),我们将它们安装到 Thermaltake SATA 驱动器读取器。
我使用 Windows 7 PC 在这些驱动器之一上创建的任何文件夹都是由我作为所有者创建的。现在,其他 Win7 和 WinXP PC 无法访问它。
如果我右键单击并进入“共享”,我可以指定与我的 PC 上的谁共享。
我不想共享文件夹。我希望这只是一个文件夹。这太令人沮丧了。
即使我以读/写方式与我 PC 上的每个人共享它,其他 PC 也无法访问它,因为它们不是我 PC 上的帐户。
我试过在微软的网站上询问,但已经一个星期了,我还没有收到答复。也许 SO 社区知道,也许这对其他人有用。
Stack Overflow(我经常去的地方)的 Luke 建议我来这里。他进一步说我应该能够添加一个可继承的 ACL,授予“每个人”访问驱动器根文件夹的权限。
但这只是一个简单的便携式驱动器。我真的必须为便携式驱动器创建访问控制列表吗?为什么 Windows 坚持为其创建所有者?
我只是希望它像任何其他“即插即用”USB 驱动器一样。
First of all, it is important to understand the distinction between sharing and file permissions. In Windows, you set up sharing to create a network share. When you add users to the sharing permissions, you are giving those users the ability to access that share remotely from another computer. From your description, it doesn't sound like this is what you're trying to do.
File permissions are separate, and dictate which users can see a file. They are also referred to as ACLs, or "access control lists". Every file and folder has an ACL, which specifies which users are permitted to do what with that file.
ACLs keep track of users by their SID. An SID is a string of characters which uniquely identifies each user and group on the computer. Even if you rename a user, their SID remains the same; likewise, if you have two users with the same username on two different computers, their SIDs are going to still be different.
A few "special" accounts and groups have the same SID on every system. These are system-level accounts in the NT AUTHORITY
domain. If you give permissions to one of these accounts, those permissions persist across all Windows computers. This is what you'll want to do.
Right-click on the drive and choose Properties
. Go to the Security
tab - not the sharing tab.
Click edit
. You should have a list of the users who currently have permissions on this drive. Click Add
, and type Everyone
in the box, then hit enter. The account "Everyone" should now be shown. Click the checkboxes to give it full control, then click OK.
Next, click Advanced
, then Change Permissions
. Check the box for "Replace all child object permissions with inheritable permissions from this object". This will assign the permissions you just created to all folders on the drive. Click OK
. It will take a while for the permissions to propogate. Then, click OK until you've dismissed all the dialogs.
这应该可以Everyone
完全访问所有计算机上驱动器上的所有文件夹。如果由于某种原因这不起作用(尽管它应该起作用,正如我之前所做的那样),请在评论中发帖,我们可以尝试弄清楚发生了什么。