Windows XP Permission/s ...

[Cider]

Hey Guys,

We run a domain here with basically no GPO polices besides a password complexity one.

On my PC which connects to the domain I am running some virtual machines which I do not connect to the domain, they all run under workgroup.

If I share a folder on my computer I generally give everyone read on sharing and then set security with ntfs permissions to lock it down. Works great. However jsut a few questions.

1) For sharing , is the read permission sufficient or must i grant full control and then lock it down with NTFS?
2) From my VM or any PC on the lan that connects locally and not to the domain, I cant seem to connect to the shares? What permissions do I give to the shared folder on my PC in order for the workgroup machines to access it? Which account do I add as I can only add domain accounts?
3) If I navigate via UNC to my PC via a workgroup PC (\\PCname\Sharename or \\PCname to view the shares) I recieve a the trust issue between the workgroup PC and the domain controller failed. However we dont have any policies that I know of in place.
4) However if I try to connect to our server from a workgroup PC then a username / password dialog box pops up which is what I am looking for.

Any shares on my network regardless if a domain PC or workgroup PC is connecting, I would love the pop-up dialog box.

Could the windows fundis shed some light on this?

Is it totally different in Vista?q

Thanks