Creating Windows' groups for users of a PC

[DayLaborer]

I have one PC running XP Pro; it is not on a network and I (obviously) am not running Active Directory. Is it possible to create some kind of AD-like group so that I could set permissions for the KIDS "group" which would then apply to that folder for KidA, KidB, and KidC? I still want to be able to modify permissions here and there so that KidA and KidB can access something, but not KidC, etc...

Thanks,
Eliezer

 

[smah]

Although this tutorial is about sharing files through the network the local user ACL information is still a very good explanation of what you need. The same concepts can also be applied to groups that you create. Just ingnore the stuff about sharing over the network.

http://www.practicallynetworked.com/sharing/xp_filesharing/01disablesimplesharing.htm

 

[DayLaborer]

I've already disabled Simple File Sharing. I've been using NTFS permissions for a while. But I want to know about creating groups. Did I miss something in the link you posted? are you referring to this specifically:

http://www.practicallynetworked.com/sharing/xp_filesharing/04usergroups.htm

?

Thanks,
Eliezer

 

[smah]

Ah - I thought that you were asking how to control groups (as opposed to users). To create your own groups, go to Control Panel, Administrative Tools, Computer Management. Or from run or cmd: compmgmt.msc

In the Local Users and Goups section you can add your own groups. Once the groups are added, go to the users section and add them as required to your new groups. do not remove remove their existing membership to the 'users' group.

To set your ACL controls for these new groups, you will probably want to use 'deny' settings along with allow to get the desired result - denying a particular custom group will override an allow permission for the entire users group, for example.