Re: Access Denied Browsing Solution

From: Chuck (none_at_example.net)
Date: 09/28/04 

Date: 28 Sep 2004 14:41:16 -0500

On Tue, 28 Sep 2004 11:51:11 -0700, <anonymous@discussions.microsoft.com> wrote:

>Chuck,
>
>I changed the registry entry to 0 which did not change
>anything.
>
>I then went into Local Security Policy and set:
>
>Network Access: Do not allow anonymous enumeration of SAM
>accounts - Disabled
>
>Network Access: Do not allow anonymous enumeration of SAM
>accounts and shares - Enabled
>
>Network Access: Let Everyone permissions apply to
>anonymous users - Enabled
>
>Can now browse to abigail from USER and GIDEON
>
>Thanks for the help. I really appreciate it.
>
>The only thing I can think of is that somehow the
>permissions for the guest account got screwed up.
>
>I realize the potential danger in this from a security
>point of view, but it does get them back working as
>expected.
>
>Thanks.
>
>Robb

Robb,

I'm still reading the articles myself, and trying to figure out what those
registry keys do, and if they are the same as the LSP settings.

I presume you made those changes on Abigail? What then are the corresponding
values on Gideon and User? Maybe check both the LSP settings, and the registry
values?

What you did may educate us all, so maybe if we can analyse your setup this
information may be of use to further readers here.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

Relevant Pages

  • RE: Cannot connect via Linked Server
    ... Network access: Do not allow anonymous enumeration of SAM accounts and shares: Disabled ... assistance from a Microsoft Support Professional through Microsoft Product ... Microsoft SQL Server Support Professional ...
    (microsoft.public.sqlserver.connect)
  • Re: LookupAccountName behavior dependent upon operating system of global catalog (GC)
    ... I checked the policy settings you noted earlier. ... Network access: Do not allow anonymous enumeration of SAM accounts - ENABLED ...
    (microsoft.public.platformsdk.security)
  • RE: Windows 95 - DSCLIENT
    ... I think you will only need to install the dsclient on your 95 ... > B. Microsoft network client: ... > D. Network access: Do not allow anonymous enumeration of SAM accounts ...
    (microsoft.public.windows.server.migration)
  • RE: Windows 95 - DSCLIENT
    ... your nt 4 pcs should be fine as well as any win 98 SECOND edition pcs. ... > B. Microsoft network client: ... > D. Network access: Do not allow anonymous enumeration of SAM accounts ...
    (microsoft.public.windows.server.migration)
  • Anonymous enumeration still enabled
    ... domain controller. ... I have applied all of the "network access" settings ... Do not allow anonymous enumeration of SAM ... Named pipes can be accessed anonymously|DISABLED ...
    (microsoft.public.security)
Loading