I have been doing some troubleshooting of my home network lately and have come to an odd conclusion that I was hoping to get some clarification on.

I'm used to managing share permissions in a domain environment via groups instead of individual user accounts. I have a box at home running windows 7 ultimate and I decided to share some directories on that machine. I set it up to disallow guest access and require specifically granted permissions. (password moe?). Anyway, after a whole bunch of time i figured out that even though the shares I created were allowed via a local group i could not access them until i gave specific allowance to the intended user. I just didn't think i would have to do that.

So here is the breakdown.

Network is windows workgroup, not homegroup or nt domain

PC_1 - win 7 ultimate - sharing in classic mode - user BOB - groups Admins

PC_2 - win 7 starter - client - user BOB - groups admins

PC_3 - win xp pro - client - user BOB - groups admins

the share on PC_1 granted permission to only the local group administrators. local user BOB on PC_1 was a member of administrators. Both PC_2 and PC_3 could not browse the intended share on PC_1 because they were denied access. Also, no challenge was presented. They were simply denied. After adding BOB specifically to the intended share everything works just fine.

Remember, its not an nt domain just a workgroup. But still, shouldn't i be able to manage share permissions via groups instead of individual user accounts?

D.