Windows 10: Setup file sharing in a most secure and convenient way?

Hello,

I am setting up file sharing between my laptop & mini desktop PC, both running 10 Pro. I will be sharing content of 4x USB HDDs locally, and need to make it as secure as possible without resorting to use of different OS or third party software. I am limited to NTFS and Windows for server because I rely on both Bitlocker and Everything! file search heavily.

So far I adjusted SmbClientConfiguration and SmbServerConfiguration on both machines (screenshot below), and removed SMB1 from Windows features.

Both machines have fixed IPs on my home network, so I would like to block SMB (and RDP, since the machine is running headless with dummy FHD monitor adapter) from communicating with any other IPs using built-in Windows firewall - which entries do I need to adjust exactly?

I also assume I better create additional user on the server machine instead of using local administrator credentials, or will it be overkill after applying the measures above?

What else do I need to do?

Please kindly help! I'm very new to this, have literally zero experience working with Windows sharing, and would really appreciate some advice from people with experience and deep understanding of it.





:)

 

GlobalScape Gives Business Users Secure and Convenient Mobile File Access

GlobalSCAPE, Inc. introduced a new capability today that enables users to securely access their business files from any popular smartphone or mobile device. The new capability, Secure Mobile Access module, combines TappIn's mobile file access with GlobalSCAPE’s proven solution, Enhanced File Transfer (EFT) Server, and allows businesses and IT departments to control the rapidly growing "Bring Your Own Device" trend.

The Secure Mobile Access module represents the first significant product integration with mobile file sharing innovator TappIn, Inc. since it was acquired by GlobalSCAPE last December. In just two months following the acquisition, GlobalSCAPE completed development to combine the convenience of TappIn’s mobile file access with the strong security measures of EFT Server.

In EFT Server, administrators have a variety of options for managing and controlling user access. With the Secure Mobile Access module, users can access files inside folders, including read-only access for specific users, with the easy-to-use TappIn interface after activating a TappIn account on their mobile device. Because the files are being accessed directly from the source, such as an office computer, and are not stored in the cloud, there is no uploading required before accessing the files.

“In today’s always-on environment, businesses know that employees need and are finding ways to access work files from mobile devices. GlobalSCAPE’s Secure Mobile Access module delivers the convenient access that business users demand with GlobalSCAPE’s enterprise-grade secure file transfer solution, EFT Server,” says GlobalSCAPE CEO Jim Morris. “TappIn’s expertise gives us a significant advantage in developing an advanced, effective mobile access solution, and we’re pleased to now offer these enhanced capabilities to our business customers.”

For more information please visit www.globalscape.com or stop by GlobalSCAPE’s booth number 1659 at the RSA 2012 Conference Feb. 28 to Mar. 1 to see a demo of this new capability.

 

Setting "Everyone" in File Sharing to Work with Specific Users


I tried post #9 instructions and could not make them work. I am quoting them below for the convenience of anyone following the thread:

Below is what I did to test the share access. The No. 1 settings granted everyone access. The No. 2 settings granted no user access, including the user on the "white list.":

 

Cannot access shared network drive


Personally, I wouldnt use Everyone. If anyone hacks into you, they have full access to everything and can demolish everything on your raid. I would rather set up accounts and access separately for each person. That way, I know who did all that damage. In the end with a little extra work, I feel more secure by using Authenticated Users.


If this helps.
step 1 create non-microsoft account and without email and address without admin rights
step 2 share a drive or folder to specific user account (if Everyone is listed, remove it)
step 3 set security > add Authenticated Users (if more than 1 account) or add specific users
step 3a remove Everyone from list
step 3b uncheck full control and write for all items listed except SYSTEM and Admin account.
step 4 right click Start > Computer Management > System Tools > Shared Folders > Shares ... to verify settings and change anything else. You can also see the number of connections to each share here.