Re: Force Authentication to Server before displaying shares Windows 2000

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/17/04 

Date: Tue, 16 Mar 2004 18:13:18 -0700

Ran,

Two more things:
1) make sure you set the Restrict anonymous to the highest level (bottom on
the gpo setting)
2) might want to get rid of Everyone on the shares. Change this to
Authenticated Users and see what you get.

After this, I am a bit puzzled without seeing it first hand, or testing it
myself. 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Ran Hooper" <ran@qnet.com> wrote in message
news:105f99t7pu0ec39@corp.supernews.com...
> Sorry I forgot to mention that I had tried that of course. Also verified
the
> change made it to the registry as well.
>
> Ran
>
>
>
> "Derek Melber [MVP]" <derekm@braincore.net> wrote in message
> news:%23mTuuh7CEHA.2628@TK2MSFTNGP11.phx.gbl...
> > no need to reboot, just run the following for each type of os:
> >
> > 2k: secedit /refreshpolicy machine_policy
> > xp,2k3: gpupdate
> >
> > -- 
> > Derek Melber
> > BrainCore.Net
> > derekm@braincore.net
> > "Ran Hooper" <ran@qnet.com> wrote in message
> > news:105f2aopfc3qma2@corp.supernews.com...
> > > I'm also thinking I might need to reboot, can't do that right now,
I'll
> > try
> > > tonight.
> > >
> > > And you are right, Windows 2003 has much much more granular control
over
> > > this.
> > >
> > > Ran
> > >
> > > "Derek Melber [MVP]" <derekm@braincore.net> wrote in message
> > > news:uGvqcH6CEHA.2560@TK2MSFTNGP12.phx.gbl...
> > > > You might want to check the "anonymous" settings for these
computers.
> I
> > > > would configure this in a GPO. The settings for 2003 and 2000 are
> > > different,
> > > > 2003 is more granular with regard to anonymous access. Also, 2003
has
> > > > anonymous access disabled by default, where 2000 allows it.
> > > >
> > > > -- 
> > > > Derek Melber
> > > > BrainCore.Net
> > > > derekm@braincore.net
> > > > "Ran Hooper" <ran@qnet.com> wrote in message
> > > > news:105et6hf11fk94e@corp.supernews.com...
> > > > > I'm coming in over a VPN on a router and not a domain member:
> > > > >
> > > > > I have a network running Active Directory on a Windows 2000 box.
Two
> > > > member
> > > > > servers running 2003 make you authenticate before displaying
shares.
> > The
> > > > > Windows 2000 box isn't asking for authentication thus some shares
> are
> > > > > unavailable since we never authenticate. How do I force it to
behave
> > > like
> > > > > the Windows 2003 boxes?
> > > > >
> > > > > Thanks.
> > > > >
> > > > > Ran Hooper
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages