Re: Guest account

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Chuck (none_at_example.net)
Date: 06/07/04 

Date: 7 Jun 2004 10:18:09 -0500

On Mon, 07 Jun 2004 06:02:43 -0600, "Steve Winograd [MVP]" <winograd@pobox.com>
wrote:

>In article <1827f01c44aa4$f9dbcc80$a601280a@phx.gbl>, "Sam"
><anonymous@discussions.microsoft.com> wrote:
>>When you turn off Guest in the Control Panel, does it
>>effect the Network on Windows XP?
>
>Turning off the Guest account in Control Panel | User Accounts has no
>effect on networking. It prevents someone from logging on as Guest at
>the keyboard of the local computer.

Are you sure, Steve?

Connecting to a Windows XP Shared Folder
The behavior of connecting to a folder or printer that is shared from a computer
running Windows XP depends on whether simple or advanced file sharing is being
used.
Connecting When Simple File Sharing is Being Used
For simple file sharing, which includes access to the Shared Documents folder,
the set of credentials sent by the connecting client are essentially ignored.
All access is based on the status of the Guest account on the computer running
Windows XP. The Guest account is enabled by default; however, you cannot use it
to logon to the computer. As long as the Guest account is enabled as an account,
client computers can access shared folders using simple file sharing.
Connecting When Advanced File Sharing is Being Used
In order to connect to a Windows XP Professional shared folder when advanced
file sharing is being used, you must be:
" Using a set of credentials that Windows XP can validate (it is either a
local computer account or a domain account) and has been granted the Read,
Change, or Full Control access type either explicitly (the account name) or
though group membership, as specified in the permissions of the shared folder.
" Using a set of credentials that Windows XP cannot validate, and either
the domain Guest account or the local Guest account has been enabled and has
been granted the Read, Change, or Full Control access type either explicitly
(the Guest account name) or though group membership, as specified in the
permissions of the shared folder.
You can be denied access to a Windows XP shared folder through the following:
" The account name in the credentials sent by the connecting client is a
valid user name, but the password is incorrect.
" The account name in the credentials sent by the connecting client is a
user name that cannot be validated by Windows XP and the domain Guest and the
local computer Guest accounts are either disabled or are not specified via the
permissions of the shared folder. The domain Guest is disabled by default and
the local computer Guest account is enabled by default for computers that are
members of a workgroup and disabled by default for computers that are members of
a domain.
" The account name and password in the credentials sent by the connecting
client can be validated by Windows XP, but either access has not been granted or
all types of access are set to Deny either explicitly (the account name) or
though group membership.

File and Printer Sharing with Microsoft® Windows®

Microsoft Corporation
Published: November 2003

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Relevant Pages

  • Re: File sharing with blank password
    ... >advanced file sharing is being used, ... >local computer account or a domain account) and has been granted the Read, ... >You can be denied access to a Windows XP shared folder through the ... >the domain Guest account or the local Guest account has been enabled and ...
    (microsoft.public.windowsxp.network_web)
  • Re: About sharing priblem
    ... Click Tools and open Folder options ... You can also disable the Guest account. ... How to configure file sharing in Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: File sharing
    ... >> The windows firewall is on File and print sharing is on. ... > It could be a ForceGuest issue... ... Validate User Credentials on Microsoft Operating Systems ... > If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)
  • cannot share printer or files
    ... paragraph and need clarification... ... Simple file sharing, the only method on Windows XP Home and one ... of two choices on Windows XP Professional, always uses the Guest account. ...
    (microsoft.public.windowsxp.network_web)
  • Re: guest dial up
    ... Ramesh - Microsoft MVP ... Free Online Virus Scanners and Security Tests: ... If you are wanting the Guest account to have Internet access, ... Troubleshooting Windows XP ...
    (microsoft.public.windowsxp.general)