Re: SBS shares. Theres no security



You have done 'something', 'somewhere' as this is not normal in a default server.

We don't know what you have done as you keep stating tht there is no username/password that matches....

Bottom line:

You have horked the permissions somehow.
There is a matching account somewhere.

For each "shared folder" please post up the security tab members and their rights.

A default, one nic SBS box will not exhibit this behavior. Unless there is a username/password on that Dell box I have over there that matches the username/password that I am logged in over here... I ain't gettin' on that box.

Enable object access on the SBS box and enable them specifically on those shared folders..

From your "rogue" box, drill down through those shared folders.
Review the audit logs for 'what' or 'whom' is obtaining access to those shared folders

Jonathan Davey wrote:

Back to the plot please folks (at the bottom of the thread please).

I had thought that the Admin account on the rogue client might have had the same password as that of Admin on SBS.

So this has been changed. There are now definately no similar user accounts on the rogue PC and SBS.

Apart from 1 that Ive just thought of, what about Oulook? The rogue PC does have custom settings in Outlook Accounts to access Exchange email, using a USER account, manually configured.

Surely an Exch account in Outlook would not propogate to a Profile....... or would it?

Im going to check this out on another PC which does not have an Outlook account with Exch access.

For clarity and because poeople keep asking:

Rogue PC = PC with NO domain, User, Device profiles in common with SBS
Rogue PC is able to browse and edit SBS default file shares.
Rogue PC is given IP from SBS DHCP



"kj" <kj@xxxxxxxxxxx> wrote in message news:uWkiglGRGHA.4956@xxxxxxxxxxxxxxxxxxxxxxx


EVERY Windows user, even "Guest" has "credentials"!

If you installed SBS with a blank Administrator password and installed XP in "shared mode" (with no password),
you have effectivly created a shadowed account thus giving you FULL access.

--
/kj
"Jonathan Davey" <me@xxxxxxxxxxx> wrote in message news:uO$XkZERGHA.4696@xxxxxxxxxxxxxxxxxxxxxxx


Ive set up a default SBS install, except with a single nic

Ive placed a rogue PC on the network, which has no credentials (user, computername, domain etc) to access SBS, the rogue PC network folders are populated with SBS file shares!!!!!! AND I can make alterations to 80% of those shares including DELETE of user added folders and files.

Can someone tell me what on earth is going on please. This is a pull the plug senario!









.



Relevant Pages

  • Re: SBS shares. Theres no security
    ... I had thought that the Admin account on the rogue client might have had the ... same password as that of Admin on SBS. ... USER account, manually configured. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS shares. Theres no security
    ... all that has been said is true - there is an account on your local PC that matches one on the server - OR you are connecting with stored credentials. ... I had thought that the Admin account on the rogue client might have had the same password as that of Admin on SBS. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS shares. Theres no security
    ... No, the rogue PC does not have a "local" user account in common with SBS, ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2K3 R2 and Outlook
    ... The archive file created on the SBS is the folder redirection function. ... | account create a new user profile on client computer. ... | transfer the local user profile to domain user profile. ...
    (microsoft.public.windows.server.sbs)
  • RE: strange problem.......
    ... Thank you for posting in SBS newsgroup. ... One is Exchange account, the other is an Internet POP3 account. ...
    (microsoft.public.windows.server.sbs)

Loading