"Windows XP Security - Simple File Sharing"
By Ralph Moore ©2004

This article pertains to both the Microsoft Windows XP Home
and Professional editions.

Windows XP provides a way for you to share documents and
files with other users on your computer and on your network.

In Windows XP, you will find a new user interface (UI) known
as Simple File Sharing or "SFS". SFS includes a new feature
called "Shared Documents".

SFS is installed by default on the Home edition and on the
Pro edition when the computer is joined to a "workgroup" on
a network. Windows XP Pro computers that are joined to a
"domain" use only the classic "file sharing and security"
user interface.

While SFS is the ONLY choice for file sharing in the home
edition, it is not the most secure system. That is one of
the reasons that I recommend XP Professional for all of my
business clients.

While it is less secure than "file sharing and permissions",
the system introduced in Windows NT and improved upon in
both Windows 2000 and XP, simple file sharing IS still a
major improvement over the older Windows 95 and 98 operating
systems.

When you use the Simple File Sharing user interface, located
in the folder's properties, both the file permissions and
the "share" are set up.

By dragging and dropping files and folders to the "shared
documents" folder, you can easily make them available to
other users.

Access permissions are configured in SFS at the folder
level and apply to the folder, all the files in the folder,
"child" folders, and all files in child folders as well.

Files and folders that are created in or copied to a folder
inherit the permissions of the "parent" folder.

In order to fully utilize simple file sharing, each user
should use a password and log into their account. The first
time a user logs in, an additional group of folders are
created for their personal profile.

The folders can be found in the "root" directory of the hard
drive, normally at: C:\Documents and Settings\UserName
which is where their personal documents will be stored.

After logging in, each user should decide whether or not to
make their personal folders "private". In order to do this,
"right click" on the folder, select "Sharing and Security"
and select the "Make This Folder Private" checkbox.

This privacy setting is only available for files and folders
that are located in an individual user profile. If you move
a file or folder that has this security setting from your
personal or C:\Documents and Settings\UserName folder, note
that the "Make This Folder Private" security setting will be
lost, and the file or folder will "inherit" the properties
of its "parent" folder.

Simple file sharing was designed to be easier to use but is
limited in scope and flexibility.

If you choose to disable Simple File Sharing in XP Pro, you
will have more control over the permissions to individual
users, but you will have to have a better understanding of
the NTFS file system and share permissions to keep your
folders and files more secure.

If you disable SFS, remember that the "Shared Documents"
feature will not be disabled.

To turn Simple File Sharing off in Windows XP Pro:
Double-click "My Computer" on the desktop.
On the "Tools" menu, click "Folder Options".
Click the "View" tab, and then click to uncheck the "Use
Simple File Sharing" check box to turn off SFS.
Save your settings.

Now you can begin to use the classic system of file sharing
and permissions which uses "access control lists" to more
fully control files, folders and other objects in your
Windows XP system.

This file sharing and permissions system will be covered in
more detail in future articles.

By using simple file sharing in Windows XP, more control
and thus better security can be realized over older, less
secure versions of Microsoft operating systems.

By taking the time to learn a little bit more about system
security and procedures, you can be assured of protecting
your important information in the years to come.

Ralph Moore, Editor - Eagle Flyer Newsletter - Get No-Cost
Software, Reports, Bonuses! mailto:subscribe@eagleflyer.com
or visit the Eagle Flyer site at: Eagle Flyer
~~~~~~~ Get The No-Cost Email Training Series Below ~~~~~~~
"How, When & Where To Post Your Articles" - "Write Here"(TM)
Training Series - Email: mailto:writehere@eagleflyer.com