Re: Re-enabling network shares for remote Guest users

Jaelani <jaejunks@xxxxxxxxxxxxxx> wrote in
news:267cf317-3a1f-4927-8539-622c17d2a1dd@xxxxxxxxxxxxxxxxxxxxxxxxxxx
m:

John Wunderlich wrote:

The two ways I know of:
1) Group Policy Editor
Computer Config->Windows Settings->Local Policies->Security Opt->
"Accounts: Guest Account Status"

and

2) From Command Prompt Window:

net user guest /Active:Yes (or No)

HTH,
John


I found a solution by changing a Group Policy setting but I don't
know if it's wise to change it or not. The setting is at:

Computer Configuration-> Windows Settings-> Security Settings->
Local Policies-> User Rights Assignment-> Deny access to this
computer from the network

Previously, it's set to: SUPPORT_xxxxxxxx, Guest
Then changed to: SUPPORT_xxxxxxxx
Removing the Guest user.

Is my previous setting the default setting?

I know this makes my network unsecure, but once I get the sharing
problem solved, I'm planning to block all Microsoft Network ports
outside my local network via Windows Firewall. This should secure
my network, right?

I also have a third-party file manager that can display detailed
information about available computer. They are:

Network Group: NETBIOS Name, Workgroup, Domain, Comment.
OS Group: Network Name, OS Name, LAN Manager.

My primary PC can see all the information but the secondary PC
can't see the OS Group information. Does this means anything?

If I were looking to secure file sharing, I would turn off Simple
File Sharing and disable the Guest account (with the "net user"
command, not the user control panel). Then create identical logins
on all machines with the same password. Finally adjust the access
permissions to shares so that only known logins can have access to
the file shares. Most home NAT (network address translation) routers
will prevent incoming connections from outside the local network
unless you configure the router to allow it. I would trust this more
than Windows Firewall.

A couple of Microsoft articles to read:

"How to configure file sharing in Windows XP"
(Concentrates on Simple File Sharing)
<http://support.microsoft.com/kb/304040>

"Windows XP Baseline Security Checklists"
<http://technet.microsoft.com/en-us/library/cc751488.aspx>

Hope this helps,
John

.

Relevant Pages

  • Re: Accessing host Win2000 Computer from remote computers
    ... In Windows 98, you should configure the computer to ask for a logon ... I don't recommend the guest ... account unless all users are trusted and a firewall protects the network but it can ... Two of the remotes are connected via ...
    (microsoft.public.win2000.networking)
  • Re: Home versus Pro - ARGH!@##!@#!@$!@#$
    ... I have two computers on the network and they are both running Windows ... The problem is with one of the computers on the network. ... Download and install the Windows Server 2003 Resource Kit Tools. ... > ntrights +r SeNetworkLogonRight -u Guest ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: share printer on home network through router
    ... >> Network Places, ... Download and install the Windows 2003 Server Resource Kit Tools ... ntrights -r SeDenyNetworkLogonRight -u Guest ... Please post any reply as a follow-up message in the news group ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networking issues - "Logon failure"
    ... I have run the Network Setup Wizard and I ... The problem is with user rights assignments on the desktop computer. ... The Guest account settings in Control Panel | User Accounts have ... If the desktop computer runs Windows XP Professional: ...
    (microsoft.public.windowsxp.network_web)
  • XP Home Networking Nightmare
    ... to Linksys then Motorola cable modem) are using Windows XP Home SP2. ... Went through the Network Wizard Setup on both computers and obviously turned ... Both computers can ping each other and access the internet. ... ntrights +r SeNetworkLogonRight -u Guest ...
    (microsoft.public.windowsxp.network_web)
Loading