Re: Network Shares for ANYONE not EVERYONE - how?

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 08/30/04


Date: Mon, 30 Aug 2004 17:47:16 +0200

Steve have you tried Everyone Group?

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Steve Lim" <steve@stevelim.com> skrev i meddelandet
news:aca0e93d.0408281751.1cde5f72@posting.google.com...
> I wrote to someone @ microsoft but didn't get a reply.. here is my
question..
>
> I am writing to you out of frustration and desperation. I'm asking for 2
> mins of your time to help clear up some misunderstandings that I have with
> Windows Security and Network Shares.
>
> The scenario is that I wish to share a folder with basically anyone
logging
> in from various workgroups and domains (we have a huge network here). I
> would like to do this without having to prompt the user for their
> username/password. Simply to allow them limited or full access to the
> folder. (I am aware of the dangers and security implications).
>
> From my research, I have found one tedious way that seems to make this
work..
>
> Here are the steps.
> 1. Enable Guest account.
>
> From Explorer.. Right click on the folder..
>
> 2. Add Guest To the folders' Sharing -> Permissions
> 3. Add Guest To the folders' Sharing -> Security
>
> From - Administrator Tools - Local Security Settings
>
> 4. Remove 'Deny Access to this computer from Network' -> Guest
> 5. Add 'Access this computer from the Network' -> Guest
>
> I think thats about it.. Those steps allow me to access the folder from
> anywhere as anyone WITHOUT a username/password prompt.
>
> My question is.. is there an easier way? Or even if there is an
alternative
> albeit just as tedious way.. I would like to know about it. Just so I can
> put this issue behind me.
>
> Furthermore, I tried another approach.. disabling the guest account and
> instead trying to use the 'ANONYMOUS LOGON' SID.. this doesnt seem to
work.
> Which makes me wonder what its for.
>
> ----
>
> Lastly, Something abit unrelated. Do you have any idea why on some
> computers.. you see nothing in 'My Network Places'. Hitting refresh doesnt
> help. The workaround is to right-click on the my network places icon and
> then choose -> Explore. This opens up another window and now correctly
> lists the network neighbourhood domains and workgroups.
>
>
> Is this a bug/feature or??
>
>
> Thanks for your time..


Relevant Pages

  • RE: Internet security on "hotspots"
    ... there's a setting in the security policy under Network Access where ... Now if we're talking shares, anonymous never did have access in most cases, ... Disabling the guest account - it's been disabled by default since NT 3.5, ...
    (Focus-Microsoft)
  • Re: User Conectivity at Home
    ... systems are all secured via profiles and passwords. ... having a shared folder setup for "everyone" is a breach of such security. ... If your network is behind a NAT router, then your file sharing is more or less ... A designated folder for sharing to "Everyone" isn't a breach of security, ...
    (microsoft.public.windowsxp.network_web)
  • LAN Problem
    ... Go to Local Security Policy, +Local Policies, Security ... Go to Shared Docucuments (or any folder you want to ... >and was able to access shared folders and printers from ... >and that I may not be have permission to use the network ...
    (microsoft.public.windowsxp.newusers)
  • Re: Make a folder private
    ... >Your Computer Pro is not much of a pro at all I'm ... >absence of a network has no bearing on whether or not ... >then folder options. ... >You then get a security tab available in a folder's ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Conectivity at Home
    ... systems are all secured via profiles and passwords. ... having a shared folder setup for "everyone" is a breach of such security. ... If your network is behind a NAT router, then your file sharing is more or less ... A designated folder for sharing to "Everyone" isn't a breach of security, ...
    (microsoft.public.windowsxp.network_web)