Re: Anonymous Logon, WinXP Pro, SP2

From: Steve Winograd [MVP] (winograd_at_pobox.com)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 12:08:33 -0700

In article <dd055a9c.0411120807.72e650a9@posting.google.com>,
strategictheory@hotmail.com (Strategic Theory) wrote:
>> When you say "classic networking" do you mean that you've disabled
>> simple file sharing on XP Professional? If so, I don't think that
>> it's possible to do what you want. With simple file sharing disabled,
>> network access requests are validated against accounts defined on the
>> computer being accessed. No match = No access.
>>
>> You can configure XP Pro to allow network access by someone logged a
>> specific account (including "Guest") at another computer. But there's
>> no such thing as anonymous access.
>
>Yes, by classic networking, I mean that I disabled simple file sharing
>on Windows XP Professional.
>
>What is it about simple file sharing that allows anonymous access?
>That is, what procedure and account does it use?

There's really no such thing as anonymous access to XP over a network.
For XP to grant access, the requesting user must have an account
defined on the XP computer. This is true for Home and Pro, and for
simple file sharing enabled and disabled.

If simple file sharing is enabled, XP forces all access requests to
appear to come from the Guest account, regardless of the requesting
user's actual account.

If the Guest account is disabled for network access, the request is
denied.

If the Guest account is enabled for network access and the Guest
account doesn't have a network password, the request is granted.

If the Guest account is enabled for network access and the Guest
account has a network password, XP prompts the user to enter the Guest
account password.

This command disables network access:

   net user guest /active:no

This command enables network access:

   net user guest /active:yes

To define or remove a network password for the Guest account:

1. Click Start | Run.
2. Type "control userpasswords2" in the box and click OK:
3. Click Guest.
4. Click "Reset Password"

Note that enabling or disabling the Guest account in Control Panel |
User Accounts has no effect on network access. It only determines
whether someone can log in as Guest at the local keyboard. 

-- 
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)
Please post any reply as a follow-up message in the news group
for everyone to see.  I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.
Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

Relevant Pages

  • Re: File sharing with blank password
    ... >advanced file sharing is being used, ... >local computer account or a domain account) and has been granted the Read, ... >You can be denied access to a Windows XP shared folder through the ... >the domain Guest account or the local Guest account has been enabled and ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cant Access C Drive of another Computer in the same Workgroup
    ... >>> Dick, ... but you do have to have a properly activated account. ... >>network access by going to the Local Users and Groups - Users, ... >>or advance file sharing. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Password required to access peer computer
    ... >I've put a link to it on my web site. ... >If you've explicitly disabled simple file sharing on the XP ... the Guest account isn't used to validate all ... >network access. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Home network - Cant access 1 PC
    ... and the guest account. ... If you need Pro's ability to set fine-grained permissions, turn off Simple File Sharing and create identical user accounts/passwords on all computers. ... This means that anyone without a user account on the target system can use its resources. ...
    (microsoft.public.windowsxp.network_web)
  • Re: TRAFFIC ISSUES runnig XP RO SP2 on 2 computers (1 client 1 s
    ... >Simple File Sharing is enabled. ... If Simple File Sharing is enabled, the Guest account has to be enabled also, for ... You can enable any account, using Control Panel - User Accounts, which will ... To enable network access ...
    (microsoft.public.windowsxp.network_web)