Re: After SP2 network share asks for login

From: Brian Guralnick (vergent.tech_at_sympatico.ca)
Date: 08/31/04 

Date: Mon, 30 Aug 2004 23:54:43 -0400

The guest account disabling should be on the server side.

Also, make sure that your server has the right account password setting for
Caper. What happens with the guest account bug is that the server on SP2
let's your XP-SP1 client partially in, even with an incorrect account name &
password. So, until you try to access any folders other than the first
master folder, you get a long pause, then the login failure.

Other settings which may help in the XPsp2 servers: (these further protect
your system's security from any anonymous users from being allowed to get
anywhere within your system)

Go into Admin tools/ Local security policy:

Local Policies / user rights assignment /
access this computer from the network = (make sure that the guest account is
not in the listings)
bypass traverse checking = (make sure that the guest account is not in the
listings)

Local Policies / Security Options /
Accounts: Guest account status = disable
Network access: Sharing & security model for local accounts = classic

____________
Brian Guralnick

<anonymous@discussions.microsoft.com> wrote in message
news:284201c48e75$ee7c0700$a501280a@phx.gbl...
>I have looked at the Event Viewer Security Log and the
> following shows up:
>
> Logon Failure:
> Reason: Unknown user name or bad password
> User Name: Caper
> Domain: GATEWAY
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package:
> MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Workstation Name: GATEWAY
>
> I also noted that these errors only started to occur
> after installing SP2.
>
> Advice please...
>
>>-----Original Message-----
>>On Sun, 29 Aug 2004 18:07:52 -0400, "Brian Guralnick"
>><vergent.tech@sympatico.ca> wrote:
>>
>>>Solution:
>>>
>>>Somehow, on the new XPsp2pro server box, the Guest
> account became enabled.
>>>Once I disabled the Guest account, the XPsp1 boxes
> produced the 'Connect As'
>>>form to be filled in.
>>
>>Brian,
>>
>>thanks, good info. I wasn't aware of this.
>>
>>Hans-Georg
>>
>>--
>>No mail, please.
>>.
>>

Relevant Pages

  • Re: Anonymous Acccess to File Share on Windows Server 2003
    ... This can be configured in Local Security Policy via secpol.msc. ... thing I did was give the guest account a password. ... > Password authentication pop up box does not appear. ... > server does not care who is trying to access the share because everyone is ...
    (microsoft.public.windows.server.security)
  • Re: Same question, still no answer!!!
    ... You'd be happier buying Win 2000 Server. ... > to use) but the other 4 pc's all only share a "temp" folder. ... > Expectation #1) keep the ethernet more or less as is. ... > this Guest account just moves the problem to item #2. ...
    (microsoft.public.windowsxp.basics)
  • Re: Same question, still no answer!!!
    ... These are the results of group policy, ie what it does to the machine. ... You'd be happier buying Win 2000 Server. ... > Expectation #1) keep the ethernet more or less as is. ... > this Guest account just moves the problem to item #2. ...
    (microsoft.public.windowsxp.basics)
  • Re: SBS 2003 server sharing a folder to a non authenticated user or device (can it be done?)
    ... Plus exchange and SQL do consume quite a bit of non-paged pool and this has the effect of making the server cough occasionally, you only see this at high IO times. ... What you MUST be aware of the the whapping security hole the guest account will drive into your network. ... Someone must have done an impact analysis for enabling the guest account on a default SBS install.. ... authentication and will use Exchange ...
    (microsoft.public.windows.server.sbs)
  • Re: New Microsoft Exchange Server Vulnerability
    ... It requires the guest account be turned on, and that the smtp virtual server ... visitors use a mail server anonymously, but because of security issues, the ... most highly-anticipated industry event of the year. ...
    (Focus-Microsoft)