Restrict Share Resource Access with DOS Basic Workstation (62941)



The information in this article applies to:

  • Microsoft LAN Manager 2.0
  • Microsoft LAN Manager 2.1
  • Microsoft LAN Manager 2.1a
  • Microsoft LAN Manager 2.2

This article was previously published under Q62941

SUMMARY

Access of share resources can be restricted to users of a DOS LAN Manager version 2.0 or 2.1 Basic workstation, even though there is no NET LOGON command available, as there is for DOS LAN Manager Enhanced workstation users. This security measure is implemented a little differently than it is for the DOS Enhanced workstation. After setting up an account on the server, start the workstation services (on the DOS Basic workstation) using as the computer name a valid account name in the server. When doing a NET USE (on the Basic workstation), use the password required for the account on the server.

MORE INFORMATION

Follow the procedure outlined below to set up this type of functionality:

  1. On the server, do the following:

    1. Set up a user. For this example, set up a user named USER1 with a password of 54321.
    2. Give USER1 appropriate rights to a particular directory. For example, give USER1 "RWC" access to the C:\DOCS directory.
    3. Share the C:\DOCS directory by entering the following command:

      net share docs=c:\docs

  2. On the DOS Basic workstation, do the following:

    1. Start the workstation services using the user name of USER1 as a computer name. For example:

      net start workstation user1

    2. Do a NET USE to the server using the password assigned to USER1. For example:

      net use t: \\<servername>\docs 54321

Now only an authorized user who knows the correct password will be able to access shares set on the server.

Modification Type:MajorLast Reviewed:9/30/2003
Keywords:KB62941