Re: Requiring User Name and Password for Connection to Network Res

On Fri, 2 Jun 2006 10:44:02 -0700, John Bigelow
<JohnBigelow@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

"Chuck" wrote:

On Fri, 2 Jun 2006 08:36:01 -0700, John Bigelow
<JohnBigelow@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

"Chuck" wrote:

On Thu, 1 Jun 2006 10:23:03 -0700, John Bigelow
<JohnBigelow@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I work in an office with about a dozen people and their respective computers,
connected via a Peer to Peer LAN with one another and a shared network
storage device. In addition to using space on the shared storage device we
periodically wish to connect to shared folders on one anothers' computers.

My computer, and most if not all of the others in the office, run XP Pro
with SP2.

When I connect (or, rather attempt to connect) to another machine on the
network I understand that my computer automatically sends a user name and
password to the computer to which I'm trying to connect. I understand that
the user name and password sent are the user name and password under which I
logged on to my own machine.

I would like to change that behavior. I would like have my computer prompt
me to supply a user name and password to be passed on the remote machine each
time I attempt to connect.

I have the impression that once upon a time when I was looking for something
else, I saw an option somewhere in Windows for changing to the desired form
of behavior, but now that I want it, I can't find it anywhere.

Do any of you know how (or if) I can do this? If so, I would be grateful to
know how.

Thank you.

John

John,

If Advanced File Sharing is active, and you have a matching account on the
server, you should get access without prompting. That's how most folks like it.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate

If you don't have a matching account on the server, and if the Guest account on
the server is not enabled, then the server should request that you authenticate
using an account / password that is on the server.

If the Guest account on the server is not active, and Simple File Sharing is
active, then you just won't get access.

See my article, and the referenced white paper from Microsoft:
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#OtherOS>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#OtherOS

Thank you for the helpful information, but I think I'm missing something
because I don't see how this answers the question I asked.

As I read the material to which you referred me, it desribes how to manage a
system in which a one computer - acting as a client - gets access to another
- acting as a server - by automatically proferring a user name and password
based on information stored on the computer, either in the windows users
profile or elsewhere.

I want to change that behavior. I don't want the client to ever
automatically offer a user name and password. Instead, I want the user to be
prompted to provide it every time.

I posted my question because I thought I had onece seen where I had the
ability to make this change, but I can't recall where it is.

So, I reiterate my initial question in perhaps slightly clearer language.
How do I instruct my computer NOT to automatically offer a user name and
password to a server and to, instead, prompt the user to enter one every time
it connects to a server resource?

John,

All of the references that I provide assume that one is trying to do what you
are trying to avoid doing, so my apologies for confusing references. So let me
rephrase everything. Read the whole set of rules below.

1) If your server is using Advanced File Sharing, and you're logged in locally
with an account that is mirrored on the server, you'll get connected
automatically.

2) If you're logged in locally with an account that is NOT mirrored on the
server, and Guest is activated for network access, you'll authenticate with
Guest.

3) If you're logged in locally with an account that is NOT mirrored on the
server, and Guest is NOT activated for network access, it will ask you to
authenticate.

4) The Microsoft white paper is a good reference here. You need to:
# Enable Advanced File Sharing.
# Disable Guest for network access.
# Ensure that no non-Guest accounts are mirrored on any potential clients.
# Ensure that at least one non-Guest account is activated for network access.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate
# Access the server from your client. When it pops up with an authentication
demand, use the non-Guest account defined on the server.

Thank you very much for califying things. I will give it a try as you suggest.

Am I correct, by the way, in interpreting your answer to mean that there is
not a way of simply instructing the cliient computer to bypass all this
complex business about whether or not there's a mirrored account or a guest
account and simply ask the user to always supply a user name and password?

John,

There's not a SIMPLER way, as most folks don't care about manual authentication.
If your account (on your local computer) is mirrored on the server, why would
you want the server to ask you to authenticate again?

So by design, if your account is mirrored on the server, you aren't asked to
authenticate. The Guest account is used as a fallback; if it's active on the
server, you aren't asked to authenticate.

Windows 98 used password protected shares ("Share-Level Access"), or optionally,
user protected shares ("User-Level Access"). Folks preferred the latter. Most
folks use user level access, and love it.

Having written all of that, I'm curious now. Why do you WANT to authenticate
repeatedly?

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
.

Relevant Pages

  • Re: ipfw plus authentication (authpf is cool but....)
    ... their ipaddress, mac address, workstation os, etc. in our ldap directory. ... gain network access is indeed belongs to that user. ... router first before being allowed to access any server. ... user will authenticate to a web based login form which is tied up ...
    (freebsd-questions)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.general)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.dns)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.networking)
  • Re: Requiring User Name and Password for Connection to Network Res
    ... If you don't have a matching account on the server, and if the Guest account on ... then the server should request that you authenticate ...
    (microsoft.public.windowsxp.network_web)
Loading