Want to secure Shared external harddrive.

[Jonas Wauters]

I have a shared External hardrive and the security properties are set to allow everyone.
My network is secured but I want that the other PC can access it even if the other is on an other router of our network.
I think this is save.
But how do I have to do this?
When I click Security:add:locations it doesn't find my workgroup sow I can't select that other user.
Am I on the wright track??

Thanks in advance

Jonas

[Jonas Wauters]

Oh I forgot to say that if I want to go to the permissions of the sharing I get this error message:

[cleaning up - attachment deleted by admin]

[viking]

How do you connect the harddrive to your computer or to network?
What is the harddrive name? (model etc)

In a workgroup each computer sets its security settings (they are set-up by someone, of course, it isn't done automatically). I am a little behind with the infos regarding the way that windows users can set security settings for other users. But you may try this way: when you add a new user at the access list, mention his user name by preceding with the computer name or ip address.
So, computer A: 192.168.0.2, user: NeedAccess. On computer 2, the one with the resource to share, try to share a folder and add rights for the user 192.168.0.2/NeedAccess (I am not sure about what I say here, but I am so curious if it works).

[Jonas Wauters]

I can only add users of my own computer that's the prob.
So can you be a bit more specified about how I have to do it?

Jonas

[Jonas Wauters]

How do you connect the harddrive to your computer or to network?
What is the harddrive name? (model etc)

Forgot to answer these questions.
The Hardrive is an Iomega DHD120-C an it is connected to my computer and shared through my computer to the network.


Jonas

[viking]

Ha ha ha
I found your OTHER post: http://www.iomegasupportforums.com/phpbb2/viewtopic.php?p=19131&sid=c098249b7e1d4f51ac66877a5948de19
Have you tried to right click on My Computer, select Manage and then disk management for formatting the drive? It does not work even when you right click on open My Computer, right click on the drive and choose Format?
The user S-1-5-21-1590031722-3510825943-2600160639-1006 is a legitimate user on the computer where the security settings were set-up. When you changed the computer, the new computer does not know nothing about that user and simply presents you the SSID of that user; that SSID is "unique" on each computer, and if your computer does not belong to a domain (bla bla bla)... You may wipe out the settings referring to that user (IF you don't place back the harddisk on the "original" computer).
Administrative sharing: you can't play with its settings; it's an automatic share, for the administrators. Only administrators have full access to that share. Of course, you can make another share, of the same folder (partition), which will not be administrative share and which you may set-up properly, as you wish.
So, if you want to share your external harddrive, you will have to create ANOTHER SHARE and the name of the share has to be different from the name of the administrative share. If the administrative share is D$, your share name could be anything else but D$ (even you are sharing twice the same folder/partition - you may share a folder/partition more times, with different settings). There are 2 signs, the D and the $,  in my example. In your particular case you could have something else instead of D; the $ sign shows that that share is "hidden". Any computer with windows will not show you the shares ending with the $ sign when you browse your network (but in Linux, for example, it is perfectly visible).
When I said you should some users I was referring to the fact that you have to TYPE the usernames and not click on the usernames... Indeed, windows shows users only from your machine if that does not belong to a windows domain (or active directory domain).
You talk about a little more extended network, with a few routers. Can you be a little more specific? How many routers? When your computer is in the other part of the network you can use all the services you need from there? When you browse your network do you see the same thing from any part of the network?
And, more important than any other question I asked: does your network has a network administrator/system engineer?

[Jonas Wauters]

First thanks for the reply.
Although it was a bit hard to read.

You may wipe out the settings referring to that user (IF you don't place back the harddisk on the "original" computer).

This issue is already solved. See Here]http://www.computerhope.com/forum/index.php/topic,35089.0/all.html]See Here

Administrative sharing: you can't play with its settings; it's an automatic share, for the administrators. Only administrators have full access to that share. Of course, you can make another share, of the same folder (partition), which will not be administrative share and which you may set-up properly, as you wish.So, if you want to share your external harddrive, you will have to create ANOTHER SHARE and the name of the share has to be different from the name of the administrative share. If the administrative share is D$, your share name could be anything else but D$ (even you are sharing twice the same folder/partition - you may share a folder/partition more times, with different settings). There are 2 signs, the D and the $,  in my example. In your particular case you could have something else instead of D; the $ sign shows that that share is "hidden". Any computer with windows will not show you the shares ending with the $ sign when you browse your network (but in Linux, for example, it is perfectly visible).

It looks like I did but it automatically changes to S$.
Now that I've read your post it seems to be normal.
That Means that I have 2 shares.

When I said you should some users I was referring to the fact that you have to TYPE the usernames and not click on the usernames... Indeed, windows shows users only from your machine if that does not belong to a windows domain (or active directory domain).

In the Location I can't really type something 

You talk about a little more extended network, with a few routers. Can you be a little more specific? How many routers?

I'll be a bit more specific.
I use 2 Routers.

(have to do it in 2 posts (to large))
Jonas

[Jonas Wauters]

Alright here we go again...

When your computer is in the other part of the network you can use all the services you need from there?

Nope that's the problem When I'm connected to Wir2 Then I can't have access to the shared printers and documents of the computers who are connected to Wir.

When you browse your network do you see the same thing from any part of the network?

I don't really get this question but if you mean that my other drives are also shared(in$) than the answer is YES.
And my question to you is why???

And, more important than any other question I asked: does your network has a network administrator/system engineer?

Like I said before and I'll say it again: We used to have a specialist but now I'm trying to be the specialist (With the help of this forum and I really appreciate it.)
So I don't really know what happened at the startup of our network.
(Maybe this is why all my dives are shared(in$).)
But this is what I do know:
Our 2 routers are Linksys and we use the Linksys build-in Protection mode.
There you can manage Filters, forwarding, MAC access list,...
I have full access to that menu.

Jonas

[viking]

First thanks for the reply.
Although it was a bit hard to read.

I'm apologizing for my uninspired words... I hope though I can help.

It looks like I did but it automatically changes to S$.
Now that I've read your post it seems to be normal.
That Means that I have 2 shares.

Yes, you have 2 shares. You can check by browsing the network shares of that computer, or by right clicking on the shared folder and check in "sharing name" (right click on folder, "sharing and security") that are more names for the share. It's ok, it is normal.

In the Location I can't really type something 

Sharing -> Permissions -> Add -> Enter the object names to select.

I use 2 Routers.

If you don't block the ports with firewalls, are you able to browse the network by using the ip of the destination computer? Do you use DNS? Do you use Active Directory (is there an Active Directory domain?) DHCP? LMHOSTS file with fixed IPs?

[viking]

Nope that's the problem When I'm connected to Wir2 Then I can't have access to the shared printers and documents of the computers who are connected to Wir.

Please try to reach a "far" computer (behind the "other" router) by using it's IP. Start->run->\\IP_of_destination_computer

When you browse your network do you see the same thing from any part of the network?

I don't really get this question but if you mean that my other drives are also shared(in$) than the answer is YES.
And my question to you is why???

No, I mean can you see other shares on the other part of the network? (on the computers that are connected to the other router, not to the router that you are connected)
Administrative sharings are made automatically by windows. You can disable those shares (it's a setting, I don't know exactly where, but hey, search engines are everywhere )


Conclusion: if your ports are not blocked by routers then you should be able to browse the network shares from any part of network, no matter what user account do you use (you allowed the "everyone" group to access the shares). If you use Active Directory (I doubt) it's even more "simple" to give access to shares. Do you use Active Directory on your network?

Linksys routers - what models? This is very important.

[Jonas Wauters]

First sorry for this late answer.
You shouldn't be apologizing because you are of great help.

In the Location I can't really type something 

Sharing -> Permissions -> Add -> Enter the object names to select.

Yes but the location is set to my computer and I can't change that one.

Nope that's the problem When I'm connected to Wir2 Then I can't have access to the shared printers and documents of the computers who are connected to Wir.

Please try to reach a "far" computer (behind the "other" router) by using it's IP. Start->run->\\IP_of_destination_computer

I've tried it and it doesn't work I get the message couldn't connect to IP

I use 2 Routers.

If you don't block the ports with firewalls, are you able to browse the network by using the ip of the destination computer? Do you use DNS? Do you use Active Directory (is there an Active Directory domain?) DHCP? LMHOSTS file with fixed IPs?

DCHP is enabled to the ip adress that looks the same of one of our computers ?! but the rest I can't find.(Maybe you can find it in the upper pic.)(I hope it doesn't contain any ifo that you normally shouldn't know because this is an public website if it does then could you PLEASE let me know as soon as possible?)
How can I see the IPaddress of Wir2?
When I use IPconfig /all I get the exact same if for the two different routers.

Linksys routers - what models? This is very important.

The model of Wir1 is BEFW11S4
and the model of Wir2 is WAP54G

If I forgot to answer any question just tell me.

Thanks for helping

Jonas

[viking]

In the Location I can't really type something 

Sharing -> Permissions -> Add -> Enter the object names to select.

Yes but the location is set to my computer and I can't change that one.

Well, I can type there (forget the mouse, I talk about the keyboard); so, if I want to specify another computer, let's say C1, I would type something like:
\\C1\username
and I mean the username from computer C1. But I am not sure about this specification, I have to read a little more about the subject.

I hope it doesn't contain any ifo that you normally shouldn't know because this is an public website if it does then could you PLEASE let me know as soon as possible?)

No problem, you did not specified any important (confidential) information.

How can I see the IPaddress of Wir2?
When I use IPconfig /all I get the exact same if for the two different routers.

Wir2, the WAP54G is an access point and not a router. If you want to see it's address... Well... Check in his manual. If it receives the IP from a DHCP server, you will have to try IP by IP untill you find it (I have another idea, to use a sniffer - Ethereal, for example -  and see who's emitting packets for the whole network, and search each IP untill you find what you are looking for).

http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1126536803676&pagename=Linksys%2FCommon%2FVisitorWrapper
http://www.linksys.com/servlet/Satellite?childpagename=US%2FLayout&packedargs=c%3DL_Product_C2%26cid%3D1115416826220&pagename=Linksys%2FCommon%2FVisitorWrapper

I think that you have another router, not Wir2, because Wir2 is NOT a router.
Your both parts of network are on the same physical location? In the same building? Computers on both parts of network receive the same IPs? (Can you check if you have 2 IPs on your network with the same value? One on Wir1 network part, one on Wir2 network part? Can you check the dhcp servers?)

If we are talking about two network parts in 2 different locations, than we are talking about VPN as a solution to your problem (unfortunately, I don't know anything about VPN, I have to learn).

You are most welcome.

[Jonas Wauters]

In the Location I can't really type something 

Sharing -> Permissions -> Add -> Enter the object names to select.

Yes but the location is set to my computer and I can't change that one.

Well, I can type there (forget the mouse, I talk about the keyboard); so, if I want to specify another computer, let's say C1, I would type something like:
\\C1\username
and I mean the username from computer C1. But I am not sure about this specification, I have to read a little more about the subject.

Maybe you can type something in the location but I can't.

How can I see the IPaddress of Wir2?
When I use IPconfig /all I get the exact same if for the two different routers.

Wir2, the WAP54G is an access point and not a router. If you want to see it's address... Well... Check in his manual. If it receives the IP from a DHCP server, you will have to try IP by IP until you find it (I have another idea, to use a sniffer - Ethereal, for example -  and see who's emitting packets for the whole network, and search each IP until you find what you are looking for).

http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US%2FLayout&cid=1126536803676&pagename=Linksys%2FCommon%2FVisitorWrapper
http://www.linksys.com/servlet/Satellite?childpagename=US%2FLayout&packedargs=c%3DL_Product_C2%26cid%3D1115416826220&pagename=Linksys%2FCommon%2FVisitorWrapper

Manual: No luck
Is a sniffer something I can dload?
If sow Where because I didn't manage to find something at Google.
And the links you have given are indeed the router and the access point that I have.

I think that you have another router, not Wir2, because Wir2 is NOT a router.
Your both parts of network are on the same physical location? In the same building? Computers on both parts of network receive the same IPs? (Can you check if you have 2 IPs on your network with the same value? One on Wir1 network part, one on Wir2 network part? Can you check the dhcp servers?)

I do have an other router but its not a wirless router is a router of Telenet.

If we are talking about two network parts in 2 different locations, than we are talking about VPN as a solution to your problem (unfortunately, I don't know anything about VPN, I have to learn).

No its not a VPN that we are talking about its a "Normal" wireless home network.

Thanks for helping me out

Jonas

[Jonas Wauters]

I forgot to say that both wir's have the same ip: 000.000.00.102.(Checked by cliking on the system tray icoon -> support.)
The default gateway is set to 000.000.00.1.
And in the Linsys settings the DCHP is set to ip 000.000.00.100 that's the ip of one of our PC's.

Jonas

[cleaning up - attachment deleted by admin]

[viking]

You say that there are a few routers in your network. That "complicates" the situation as I need to know more about network topology before being able to post a right answer. What computers connect to what router, what router connect to what router etc. I don't need specific information like "comp a connects to router boo" and repeat the operation for each computer. I need a general information, something like 10 computers connect to router X through ethernet, 20 computers connect to router Y wireless, network IP addresses. Also, important  are the switches. The switches that allow management could are very-very important to mention.
BUT this is SENSITIVE information, pay attention what you say to whom.
As far as I can assume, there are 2 cases:
case 1) The physical network is divided into a few small networks, located in different locations. Different buildings in town or something like that, not your "personal" cables between them (companie's), so you have to use internet to connect to those "network branches". In this case... VPN is the sollution. I can't help you here with anything but naming the VPN.
Or a ftp server. Eventually with port forwarding at your routers.
case 2) The physical network is in a single area, a building or a few buildings nearby, or in the same yard. Where you use some of "home" routers for connectivity. Depending on your particular situation you may need to use port forwarding or solve the problem without port forwarding. But I need sensitive information: at least the network map, which router connects to which router, model of routers, if you have switches, switches with management, access points, dhcp servers, dhcp pools etc

In the image, you hid the ip. It's a good measure of security. Unfortunately... For your problem to be solved, you need to provide me with more information which is (I repeat) SENSITIVE INFORMATION for your company: network map, IP's, devices roles in the network (desired device roles in the network in fact).

[Jonas Wauters]

Like I said before: it is a small home network only used inside our home. (But white detailed info about a company sow it needs to be well protected.)
The problem is: I'm just 16 and 3 monts ago I only knew the basics of computering.
I'm learning fast but I'm still a beginner.
Sow would you please explain me how I can collect the info you needed.

For the IP addr: I do believe that you'r only trying to help but this is a public site...
And the beginning of all the IP addr I've seen sow far are all the same if Not I'll tell you.
Is that good enough to solve the prob?

The router of Telenet is controlled by telenet (the company who provides us Internet and digital tv.)
Sow The router of telnet is only 2 Internet connections 1 for our Wir Internet and one for our Digital TV.
The Wir Internet connection is then through a cable connected to our Linksys router.

Jonas

[viking]

Your last post tells everything I want to know.
I am not interested about the IPs that the ISP gave to you. Just about the local area network IPs. For example I won't tell you my public IP, that was given by my ISP; but I can tell you without any problem that my internal network uses IPs from 192.168.54).

If only the wireless access point and the router Linksys are in your network than your problem is located here. Most probably on the access point.

You can't have 2 identical IP's in your local network, unless some routers are involved. I hope you just made an error when you told that. Please check. If it is as you said (two or more devices with the same IP) and no error messages are thrown, than you have 2 separate (distinct) networks.

I did not asked you the most basic question (shame on me): do all computers respond at ping command, no matter if they are attached to access point or simply to the wired router? Or asked diferently: can you ping the router Linksys (the wired one) from any of the computers? Pay attention to firewall rules on each computer and the security settings on router, they may deny your ping packets.
Do you have a wired switch connected to your wired router? What model?

[Jonas Wauters]

Here Is what I know:
I think that they are indeed two separated Networks See Attach.
My internal IP is 192.168.92.1 for both the router and the access point.
I'm beginning to realize that that is my problem.
Isn't it?
But how can I change that?
And wouldn't that have any effect on the Linksys security program?
and Yes both the router and the access point respond well on a ping command.

Thanks for helping

Jonas

[cleaning up - attachment deleted by admin]

[Jonas Wauters]

Looks like I have to make 1 network of the 2 that now exists.
But how?
Should I buy a new router to connect those 2?
Thanks in advance

Jonas

[viking]

Sorry for my late answer... I had not time yesterday or today to re-read the wir2 manual.
No, you do not need another router, you simply need to use the same ssid for both the wireless router and wireless access point.
I will find the informations and I will tell you what I find.

[Jonas Wauters]

Thanks

Jonas

[Jonas Wauters]

I'm trying to find info on the web about how I'm suppos to set the SSID of WIR2 but I can't find anything.
After the exams I'll be able to search if there is any Book that came with the access point.
I don't realy know the name of it.

Jonas