1

I have an external hard drive, and I wish to grant permissions on some files to users from 2 different computers without having to hook it up to the 2 different computers. I know the SID of the user on the other computer, I'd like to know if and how I can grant permissions to files using the SID.

I'm running Windows 7 Professional 64 bits, and "The Other" computer Win 7 Home Premium 64 bits, they are not in a domain, but separate computers on a home network (not even same homegroup).

Note: Duplicated question with: Is there a way to give NTFS file permissions to users from other Windows installations?

9
  • 1
    What version of W7? And are the computers in a Domain? Jun 1, 2014 at 20:10
  • Thanks @JulianKnight, I'm updating the question. (I'm on W7 pro, the other is W7 starter) and no domain, home network.
    – Thomas BDX
    Jun 1, 2014 at 20:30
  • 1
  • Thanks @and31415, it's indeed a duplicate, I somehow didn't find that question.
    – Thomas BDX
    Jun 1, 2014 at 20:47
  • 1
    @Thomas Basically there's no way to do what you want. As a workaround you could use something like this: icacls "file or folder" /grant:r *S-1-1-0:F The S-1-1-0 identifier is assigned to the Everyone group, which "includes all users, even anonymous users and guests." Source That way you wouldn't need to worry about different SIDs. I don't know if that's acceptable for you, though. By the way, Windows 7 Starter doesn't have a 64-bit version. Did you mean to say it was 32-bit?
    – and31415
    Jun 1, 2014 at 20:57

1 Answer 1

1

Workaround

There's no way to do what you want. If you were to try anyway, you would be greeted with the following error message:

No mapping between account names and security IDs was done.

As long as granting access to everyone is acceptable, you can use the icacls command like this, changing the permissions as needed:

icacls "file or folder" /grant:r *S-1-1-0:F

The S-1-1-0 identifier is assigned to the built-in Everyone group, which includes all user and guest accounts. This means you don't need to worry about different SIDs.

Further reading

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .