Given a scenario configure MS windows network on a client/desktop
Network sharing is a feature that allows resources such as files, documents, folders, media, etc., to be shared over a network. These resources are made accessible to other users/computers over a network. In this post, we will describe how you can enable a user account to create network shares in Windows 10.
Network sharing is also known as Shared resources. It enables access to information by more than one person through more than one device at the same or at different times. By connecting a device to a network, other users/devices in the network can share and exchange information through this network.
Create Network shares in Windows 10
For administrators who want to enable a user account to create Shares in Windows 10, do the following:
– Add the user account to the Power Users administrative group. By default, the Power Users’ administrative group has permission to create shares.
– Enable the File and Printer Sharing group in the firewall. When the first user share is created (not counting default shares), the File and Printer Sharing group in the firewall is enabled automatically.
If the first user share is created by using a user account that does not have permission to enable that group, the action will fail. In which case, you can grant the account permission to the user to allow the user to enable firewall settings. To do this, add the user account to the Network Configuration Operators group.
In Windows 10, when a user account in Power Users administrative group logs on, two separate access tokens are created for the user:
• A Standard Users administrative group access token.
• A Power Users administrative group access token.
By default, Standard Users and Power Users administrative group both access resources and run applications in the security context of the Standard Users administrative group. To use the Power User administrative group access token, run the application as administrator.
However, you can configure the Local Security Policy snap-in (Secpol.msc) or Local Group Policy Editor (gpedit.msc) to allow a power user who opens a Command Prompt window as an administrator to create a share by running the command below:
net share sharename=drive:path