Granting access to NTFS drive

Hello all.

I have a portable NTFS formatted harddrive. I replaced the default
'everyone' access with 'my computer\administrator' access while the
drive was hooked up to my desktop computer (XP professional).

Now I want to allow another user (my notebook's administrator) to
access it as well. So that only my two computer's administrator users
could access the disk. My notebook has XP home edition on it. How do I
go about doing this?


TIA
Adeel

Adeel wrote:
I have a portable NTFS formatted harddrive. I replaced the default
'everyone' access with 'my computer\administrator' access while the
drive was hooked up to my desktop computer (XP professional).

Now I want to allow another user (my notebook's administrator) to
access it as well. So that only my two computer's administrator
users could access the disk. My notebook has XP home edition on it.
How do I go about doing this?

Interesting.
I'm not 100% sure this would work - but - you would need to grant everyone
their rights back first..

Then connect to machine (1) - grant the admin full rights to every
file/folder.
Then connect to machine (2) - grant the admin there full rights to every
file/folder.
Remove the "everyone" group.

Now see what happens. It could be that when looking at file/folder
permissions on one machine - you see an unknown-SID that has permissions.
If so - then the same should be true when you connect tot he other machine -
just a different unknown SID.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Just add administrators to the access control list. Then any administrator
[built in administrator or member of administrators group] on either
computer can access the files. --- Steve


"Adeel" dontWantSpam@All wrote in message
...
Hello all.

I have a portable NTFS formatted harddrive. I replaced the default
'everyone' access with 'my computer\administrator' access while the drive
was hooked up to my desktop computer (XP professional).

Now I want to allow another user (my notebook's administrator) to access
it as well. So that only my two computer's administrator users could
access the disk. My notebook has XP home edition on it. How do I go about
doing this?


TIA
Adeel

Thanks for your response Shenan.

I have XP home on the second machine... and as a result there is no
security tab. So I can't grant full control to the admin account on
it.


What do I do now?


TIA
Adeel

Adeel wrote:
I have a portable NTFS formatted harddrive. I replaced the default
'everyone' access with 'my computer\administrator' access while the
drive was hooked up to my desktop computer (XP professional).

Now I want to allow another user (my notebook's administrator) to
access it as well. So that only my two computer's administrator
users could access the disk. My notebook has XP home edition on it.
How do I go about doing this?

Shenan Stanley wrote:
I'm not 100% sure this would work - but - you would need to grant
everyone their rights back first..

Then connect to machine (1) - grant the admin full rights to every
file/folder.
Then connect to machine (2) - grant the admin there full rights to
every file/folder.
Remove the "everyone" group.

Now see what happens. It could be that when looking at file/folder
permissions on one machine - you see an unknown-SID that has
permissions. If so - then the same should be true when you connect
to the other machine - just a different unknown SID.

Adeel wrote:
Thanks for your response Shenan.

I have XP home on the second machine... and as a result there is no
security tab. So I can't grant full control to the admin account on
it.

What do I do now?

I think Steven's response may work.. Give it a shot.
(Although - if you boot into safe mode - you have the security tab.)

Steven L Umbach wrote:
Just add administrators to the access control list. Then any
administrator [built in administrator or member of administrators
group] on either computer can access the files. --- Steve

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

Thanks for replying Steve...

Where would I find this 'access control list'?


TIA
Adeel

I think Steven's response may work.. Give it a shot.
(Although - if you boot into safe mode - you have the security tab.)


Thanks Shenan... booting into safe mode did the trick. It got me the
security tab. And the rest of the process was just the way you said it
would be.


Thanks again for your help
Adeel

Adeel wrote:
Hello all.

I have a portable NTFS formatted harddrive. I replaced the default
'everyone' access with 'my computer\administrator' access while the
drive was hooked up to my desktop computer (XP professional).

Now I want to allow another user (my notebook's administrator) to
access it as well. So that only my two computer's administrator users
could access the disk. My notebook has XP home edition on it. How do I
go about doing this?


TIA
Adeel

Try the FaJo XP File Security Extension (XP FSE)
It's free and gives XP Home (Prof and w2k) a security tab.

http://www.fajo.de/portal/index.php?...=6&It emid=47


Sjoerd Visser

Sjoerd Visser wrote:
Try the FaJo XP File Security Extension (XP FSE)
It's free and gives XP Home (Prof and w2k) a security tab.

http://www.fajo.de/portal/index.php?...=6&It emid=47

Interesting tool. Going to check it out.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

The access control list is where you manage permissions via the security tab
by adding users/groups and giving them the needed permissions and per
response to Shenan it sounds like you all ready have done it. --- Steve


"Adeel" dontWantSpam@All wrote in message
...
Thanks for replying Steve...

Where would I find this 'access control list'?


TIA
Adeel

Yes, I have successfully resolved the original problem.

Now the trouble is that every administrator can modify the permissions
and grant himself access via the same procedure (although I just
granted access to two specific accounts, one on each machine. And
removed the everyone group).

Is there any way I could restrict access to just two specific
administrator users... and disallow everyone else (including other
administrators) from granting themselves the access?


TIA
Adeel

Adeel wrote:
Yes, I have successfully resolved the original problem.

Now the trouble is that every administrator can modify the
permissions and grant himself access via the same procedure
(although I just granted access to two specific accounts, one on
each machine. And removed the everyone group).

Is there any way I could restrict access to just two specific
administrator users... and disallow everyone else (including other
administrators) from granting themselves the access?

If you added the specific usernames (and they were not the default
"administrator") and not the group (administrators) - then only those
usernames will have access. However - anyone with admin rights on a machine
owns it.. They can TAKE ownership away and give themselves rights.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

If you added the specific usernames (and they were not the default
"administrator") and not the group (administrators) - then only
those usernames will have access. However - anyone with admin
rights on a machine owns it.. They can TAKE ownership away and give
themselves rights.



I suppose this is what is happening... ownership transfer. I did grant
access to specific administrator users only (not the admin group, not
the default account).

A new admin cannot directly open the disk but they can grant
themselves the access by opening the security tab and adding
themselves.

I suppose there's no way to keep that from happening?


Thanks for all your help
Adeel

Adeel wrote:
If you added the specific usernames (and they were not the default
"administrator") and not the group (administrators) - then only
those usernames will have access. However - anyone with admin
rights on a machine owns it.. They can TAKE ownership away and give
themselves rights.



I suppose this is what is happening... ownership transfer. I did grant
access to specific administrator users only (not the admin group, not
the default account).

A new admin cannot directly open the disk but they can grant
themselves the access by opening the security tab and adding
themselves.

I suppose there's no way to keep that from happening?


Thanks for all your help
Adeel


Nope

You can use Group Policy to hide the security tab [user
configuration/administrative templates/Windows components/Windows Explorer]
,deny the user access to the command prompt and registry editing, and remove
administrators from the user right for take ownership of files and that will
dissuade most users but a skilled administrator will be able to find a way
to undo the restrictions if they want to. That does not mean it is not
worth trying though. --- Steve


"Adeel" dontWantSpam@All wrote in message
...
If you added the specific usernames (and they were not the default
"administrator") and not the group (administrators) - then only those
usernames will have access. However - anyone with admin rights on a
machine owns it.. They can TAKE ownership away and give themselves
rights.



I suppose this is what is happening... ownership transfer. I did grant
access to specific administrator users only (not the admin group, not the
default account).

A new admin cannot directly open the disk but they can grant themselves
the access by opening the security tab and adding themselves.

I suppose there's no way to keep that from happening?


Thanks for all your help
Adeel