1. Home
  2. /Hands-on Labs
  3. /Windows File Share Lab
Feeling StupidKeyboard Layout

Windows File Share Lab

Create a local user account, configure NTFS and share permissions, and confirm remote access to a Windows file share.

Lab Objectives

  • Create a dedicated local user for file share access.
  • Provision a shared folder with secure NTFS and share permissions.
  • Test connectivity via UNC path using the new user’s credentials.
  • Document the configuration and optionally tidy up when finished.

Prerequisites

  • Windows 10/11 Pro, Enterprise, or Education with administrator rights.
  • File and Printer Sharing enabled (default on private networks).
  • Optional: a second Windows device on the same LAN to test remote access; otherwise use localhost.

Part 1: Create a Dedicated User

  1. Open Settings > Accounts > Other users. Select Add account, then choose I don’t have this person’s sign-in information followed by Add a user without a Microsoft account.
  2. Create a local account named ShareUser with a strong password. Leave the account as a standard user.
  3. Confirm the account appears in Computer Management under Local Users and Groups > Users.

Part 2: Build the Share Folder

  1. In File Explorer, create C:\Shares and inside it a folder named Projects.
  2. Right-click Projects, choose Properties, and open the Security tab. Click Advanced, disable inheritance, remove unnecessary entries, then add Administrators (Full control) and ShareUser (Modify).
  3. Add a test document such as readme.txt with a short note so you can confirm read/write access later.

Part 3: Configure the File Share

  1. Right-click the Projects folder, choose Properties, and open the Sharing tab. Click Advanced Sharing…, check Share this folder, and set the share name to Projects.
  2. Select Permissions, remove Everyone, add Administrators with Full Control, and add ShareUser with Change and Read permissions. Apply the changes.
  3. Open Control Panel > Network and Sharing Center > Advanced sharing settings to ensure File and Printer Sharing is turned on for the Private profile.

Part 4: Test Access

  1. From another device (or the same machine), open File Explorer and enter \\<hostname>\Projects. Use hostname to find the computer name.
  2. When prompted, supply the ShareUser credentials. Check that you can read readme.txt and create a new file.
  3. On the hosting machine, open Computer Management > System Tools > Shared Folders > Sessions to confirm ShareUser is connected. Capture a screenshot if possible.

Part 5: Document and Secure

  1. Record the share name, path, NTFS permissions, and share permissions. Screenshot the Advanced Sharing dialog if using GUI.
  2. Note any audit trail created in Event Viewer > Applications and Services Logs > Microsoft > Windows > SMBServer.
  3. Plan ongoing security: schedule regular reviews of share membership and monitor for suspicious SMB sessions.

Optional Cleanup

  • Stop sharing by opening the folder properties > Sharing tab > Advanced Sharing… and clearing Share this folder.
  • Remove the Projects folder from File Explorer if no longer needed.
  • Delete the ShareUser account via Settings > Accounts > Other users or Computer Management.
Quick Reference
  • User management: Settings > Accounts > Other users or lusrmgr.msc
  • Sharing tools: Folder Properties > Sharing > Advanced Sharing
  • Monitor sessions: Computer Management > Shared Folders > Sessions

For production, consider using groups instead of individual users, and audit access with Advanced Security settings on the share.

Completion Checklist
  • ShareUser account created and documented.
  • Projects folder created with correct NTFS permissions.
  • SMB share published with least privilege access.
  • Remote access tested and SMB session verified.
  • Configuration notes captured; optional cleanup completed.