Windows 10: Creating a shared directory on the network using the command prompt

Hi

I have Windows 10 v1703 Enterprise 64 bit with the Microsoft accounts.

Wanting to create a shared directory on the network using the command prompt, in an administrative account I ran the Command Prompt (as administrator) and I run the following commands:

Code: md C:\Users\Public\Documents\WIM_file net share WIM_file="C:\Users\Public\Documents\WIM_file" /grant:" (xxx@yyy.zz)",read /grant:" (xxx@yyy.zz)",write /cache:none System error 1332. No mapping between account names and security IDs (SIDs) has been made.[/quote] Where am I wrong?

Thanks

Bye

:)

 

Hosted network support

After creating in Command Prompt does it gets listed in Network and sharing center?

 

Connect to a Wi-Fi network using Command Prompt

If you have a SSID with space, please use "" to specify the name i.e. if your SSID is Home WiFi, type netsh wlan connect "Home WiFi" or netsh wlan connect name="Home WiFi"

 

Warning Please edit you post and remove the email address. It is never a good idea to post your email or street address, phone number or other personal informatiom. It can (and often will!) be misused and lead to serious complications.

Regardless if you are signing in to Windows using a local account, Microsoft account or workplace Azure AD account, in networking your username is your user profile name, not the email address.

For instance, I sign in to Windows with a Microsoft account @An_Imaginary_Email_Provider.com, but in all networking purposes my user name to access shares on this machine is just , or using the long form \\ComputerName\.

Second, you don't need to grant read and write access separately. Granting full access rights takes care of both.

In screenshot I created a folder on my H: drive, naming it ShareDemo, then shared it granting myself full access:





Checking the folder properties I can see everything is as expected, I will have full access rights to this shared folder:

 

Problem 1
You have entered email address in this format "Your name (YourName@hotmail.com)". Doing this, putting in an email address that is not linked to an account on your system or entering an account that doesn't exist on your system will give System error 1332.

If you want to use an email address then it muct be in YourName@hotmail.com format and it must be linked to an account on your system - it is mapped automatically to PC_NAME\UserName format. Code: C:\WINDOWS\system32>net share Downloads="C:\Users\Hali\Downloads" /grant:my.email@hotmail.com,full Downloads2 was shared successfully. C:\WINDOWS\system32>net share downloads Share name Downloads Path C:\Users\Hali\Downloads Remark Maximum users No limit Users Caching Manual caching of documents Permission X201\Hali, FULL The command completed successfully.[/quote] Problem 2

In fact you can't - write is not an option. The options you have for net share are READ, CHANGE and FULL.
Code: C:\WINDOWS\system32>net share /? The syntax of this command is: NET SHARE sharename sharename=driveath [/GRANT:user,[READ | CHANGE | FULL]][/quote] If you want read and write you likely want the CHANGE permission (CHANGE allows modify, create, delete, FULL allows user to change permissions also).


In summary you need to fix your account name/email address and drop trying to grant write.

Replace thisnet share WIM_file="C:\Users\Public\Documents\WIM_file" /grant:"Balubeto Balubeto (xxxxxxx@hotmail.com)",read /grant:"Balubeto Balubeto (xxxxxxxx@hotmail.com)",write /cache:none
with
net share WIM_file="C:\Users\Public\Documents\WIM_file" /grant:xxxxxxx@hotmail.com,change /cache:none


Setting permission on share and NTFS means you have duplication and you also can't change the permissions on the share. To add another user for example you would have to delete it and add it again.
A little something about Share vs NTFS permissions

A better option is to grant everyone full authority and then deal with access using NTFS permissions - so set the share
net share WIM_file="C:\Users\Public\Documents\WIM_file" /grant:everyone,full /cache:none

 

I tried the net share WIM_file="C:\Users\Public\Documents\WIM_file" /grant:xxx@yyy.zz,change /cache:none command and it works.

Now, from the Command Prompt, how do I delete a user (with its share permissions) from a shared directory?

Thanks

Bye

 

By default you can't. You have to delete the share and reado it or you get the error "the name has already been shared". Code: C:\>net share Downloads2="C:\Users\Hali\Downloads" /grant:administrators,full /grant:users,read Downloads2 was shared successfully. C:\>net share Downloads2 Share name Downloads2 Path C:\Users\Hali\Downloads Remark Maximum users No limit Users Caching Manual caching of documents Permission BUILTIN\Administrators, FULL BUILTIN\Users, READ The command completed successfully. C:\>net share Downloads2="C:\Users\Hali\Downloads" /grant:everyone,full The name has already been shared. More help is available by typing NET HELPMSG 2118. C:\WINDOWS\system32>net share Downloads2 /delete Downloads2 was deleted successfully. C:\>net share Downloads2="C:\Users\Hali\Downloads" /grant:administrators,full /grant:users,read /grant:everyone,full Downloads2 was shared successfully. C:\>net share Downloads2 Share name Downloads2 Path C:\Users\Hali\Downloads Remark Maximum users No limit Users Caching Manual caching of documents Permission BUILTIN\Administrators, FULL BUILTIN\Users, READ Everyone, FULL The command completed successfully.[/quote]
You could download SetACL.exe and use that as described here.

For example to add then remove "Everyone":

Code: C:\>SetACL.exe -on "Downloads2" -ot shr -actn ace -ace "n:everyone;p:change" Processing ACL of: <Downloads2> SetACL finished successfully. C:\>net share downloads2 Share name Downloads2 Path C:\Users\Hali\Downloads Remark Maximum users No limit Users Caching Manual caching of documents Permission BUILTIN\Administrators, FULL BUILTIN\Users, READ Everyone, CHANGE The command completed successfully. C:\>SetACL.exe -on "Downloads2" -ot shr -actn trustee -trst "n1:Everyone;ta:remtrst" Processing ACL of: <Downloads2> SetACL finished successfully. C:\>net share downloads2 Share name Downloads2 Path C:\Users\Hali\Downloads Remark Maximum users No limit Users Caching Manual caching of documents Permission BUILTIN\Administrators, FULL BUILTIN\Users, READ The command completed successfully.[/quote]

The syntax of SetACL command is not particularly intuitive but is described well in their documentation here: SetACL Command Line-Version (SetACL.exe) - Syntax and Description if you want to play with share permissions (I don't *Wink )

This is another reason to set the share to everyone,full and control access through NTFS - you are just making an administrative headache for no benefit (that I can see) as access is granted on the most restrictive of NTFS and share permission anyway.