Re: SBS 2003 server sharing a folder to a non authenticated user or device (can it be done?)



Roveer,
I don't think this is possible/practical for a few reasons.
1/ you would (probably) have to disable server session signing & encryption globally
2/ SBS on a 'modern' box means dual-core? say 2GHZ.. Despite what one would think, the machine will be fairly busy and exchange and SQL between them will conspire to hog any available resources. Now I'm not saying it won't work, or that there will be issues or that the machine will be under resourced..
BUT.. streaming video files really will be pushing the boat a bit.. it all will depend on the sustainable IO rate and this boils down to hardware performance and careful configuration. Plus exchange and SQL do consume quite a bit of non-paged pool and this has the effect of making the server cough occasionally, you only see this at high IO times. I see it if the backup happens to overlap the defrag.
Plus interupts are being serviced at a slower rate on a 2GHZ system.. I've seen many a 3GHZ scsi-bassed system outstrip a dual-core 2GHZ system, despite the dual core system (supposedly) having 4GHZ of total horse-power. hmm..
If we can get this to work, I would think to 'suck-it-and-see' if the video plays ok or 'hops'...


Where to start..
unauthenticated access is 'guest' access.
in theory, enabling the guest account and granting it access to a share and then setting the appropriate NTFS permissions 'should' work.
What you MUST be aware of the the whapping security hole the guest account will drive into your network.

Have any of the MVP's here got any notes, guides or supplementary advice (save for the expected "don't do it!") on the implications and effects of enabling the guest account.???

I know for one that the default share permission of Everyone:Read will be an issue.
NTFS (by default) uses the token 'Authenticated Users'... does the guest account hold this token? if it does you may need to run the base-line Security Configuration and Analysis tool and reset (substitute) all the NTFS (Authenticated Users) permissions with something like 'Domain Users'.
Plus there may be the knock-on effect of some clients mistakenly authenticating as the guest account, rather than the user and getting locked out of some shares/files..
Someone must have done an impact analysis for enabling the guest account on a default SBS install..

David Barnes


"Roveer" <roveer@xxxxxxxxx> wrote in message news:ca303070-5a9c-4e7c-9bbd-f080e59f4cf9@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Will be bringing a SBS box into our small office environment. We used
to just use an XP box with some security to share a folder to hold all
of our corporate data. Will do the same in SBS using AD
authentication and will use Exchange (the main reason for using SBS)
BUT since I have this big honking server here and will want to store
audio/video that will be consumed by hardware players is it possible
to share a folder without AD authentication? Similar to XP? If not,
then can a AD Authenticated XP box have a mapped drive to the server
and then share it? One way or another I have to find a way to share
without AD Authentication a folder for music/video.

Thanks,

Roveer

.



Relevant Pages

  • Re: OWA Authentication Problem With SBS 2003
    ... > Thank you for posting in the SBS newsgroup. ... > the OWA from SBS 2003 Server itself, one of internal clients or Internet? ... Please re-run the CEICW (Configure Email and Internet Connection ... > configure the correct Authentication type for OWA. ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA Authentication Problem With SBS 2003
    ... you are able to log in OWA after disabling the form based ... authentication, and you would like to let the OWA work when you re-enable ... obtain access to your Exchange Server 2003 mailbox. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Fax Alerts
    ... Server" and choose Properties. ... Click the Authentication button. ... Anonymous access ... Granted SBS Server External IP Address ...
    (microsoft.public.windows.server.sbs)
  • Re: Login and Time Sync Issues
    ... The Event IDs 40960 and 5 were on the SBS Server and ONLY when the other DC was offline. ... Everything about the SBS system is working other than its ability to communicate with the rest of the domain. ... working only things that require authentication are not working. ... >and paste the full content to the Newsgroup. ...
    (microsoft.public.windows.server.sbs)
  • Re: Incoming mail for recipients not in my domain
    ... The setting on my SMTP virtual server is indeed to allow authenticated users ... Also 'basic authentication' and 'Integrated Windows ... Although you are not an open relay, ... > your Guest account is Enabled). ...
    (microsoft.public.exchange2000.admin)