Permit Everyone Access to a Windows 2003 Shared Folder

This one is driving me nuts! I have several Windows XP Pro clients on a workgroup with a Windows 2003 Server. I have a shared folder on the 2003 server that I would like everyone to be able to access without being prompted for a password. The problem is that I always get prompted for a username/password despite the settings I've changed. I've trawled the net and found people with similar problems but no solutions.

The folder in question has share and NTFS permissions set for the Everyone group. The server has the "Let everyone permissions apply to anonymous users" policy enabled, the Everyone group is included in the "Access this computer from the network" policy, the guest account is enabled and has a password set. I've toyed with all the other relevant settings I can find but nothing seems to help.

Your help will be greatly appreciated!

Thanks,
D.
LVL 1
_KeepItSimple_Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
Any reason you're not using a domain?
Steve AgnewSr. Systems EngineerCommented:
You need to enable the guest account, and then you need to add the guest account to the NTFS permissions and the share permissions.. not sure if GUEST is part of the 'Everyone' group.  Think it is so that if you want to use one where you need passwords you use 'Authenticated Users'.  Your problem is why the guest account exists.. everyone is so terrified of it because it used to mean 'Opening the Farm' it isn't anymore.  It is for situations like your's where you are not using a domain controller.. if you were and everyone logged in then you would use Authenticated Users..

A word of warning though, make sure that you cannot access the server from the internet and if so it's firewalled, enableing the guest account won't give instant access.. once the account is enabled you still need to set what it has access to.  The guest account is bascially a user account that doesn't need a username or password- which is what you are trying to do give users access to a resource they don't have to 'authenticate to' .. the only other way is to create an account that matches exactly the username and password of each user which soon becomes a nightmare (they change passwords it stops working.)

Hope this helps.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Steve AgnewSr. Systems EngineerCommented:
Note above comment: your server can have access to GET to the internet, just make sure that internet users can't GET to it *FROM* the internet..  Another reason for not enabling the guest account is that it allows people to access accounts and such on your servers and you can't log it.  If you are concerned about your users on your network hacking your server youre back to the nightmare of creating each and every account and making sure passwords match for each user.. if you haven't even enabled the logging of access to your server then you wouldn't have any logs to look at anyway.  Security is complicated in our current IT world, but you just have to look at the risks basis the gain.. if you aren't worried about hackers and you can't get to your server *FROM* the internet then enabling the guest account is your best solution.  Feel free to give more specific information as to how the server is used and it's connected and I can be more specific.. I'm having to guess to give you this information...
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

_KeepItSimple_Author Commented:
It wasn't my decision to not use a domain (I have a limited say on the infrastructure) although we do have plans to move to a domain in the future.

Thanks very much for you help so far. I'll have another go next time I'm in the office and let you know how I get on.
_KeepItSimple_Author Commented:
On second thoughts, I'll give you some background as I'm not sure I'm doing this for the right reasons.

I have a VBScript file that maps network drives etc using a common username/password and would like this script to run on each client machine at logon. Rather than have the script duplicated on each client, I thought it would be better to have the script on the server and each client access that copy when required.

Each client has a logon script that does nothing but call the script on the server. However, the client scripts fail because access is denied when they attempt to access the share on the server. Hence, my original question was in an effort to get anonymous access to the share containing the central script.

I hope this makes sense. I know that a domain controller is the ideal solution, but that option isn't available to me at the moment. Let me know if I'm going about this all wrong.

Thanks,
D.
Steve AgnewSr. Systems EngineerCommented:
In your current situation is about the only time you would want to use the guest account.  Like I said, that is why it exists, you don't care who or why they access it (just make sure the access for guest is READ ONLY) so users or a virus they might get can't change it.  This is perfect for you, once you get a domain controller you can disable the guest account and configure it with a higher security.  Like I said everyone is so afraid of the guest account because it used to give 'access to everything' now it only gives access to what you configure it to.  You may even have difficulty getting it to work at first as Microsoft wants to make da** sure you want to give them access .. they shouldn't have an account with the same name on the server .. if they do their machine is probably going to try that and if it's different they will get access denied..   The DC will make all of this unnecessary, but until you have one and you want to give people access to something without having them login- that is why GUEST exists...
negativelocityCommented:
If you create a mapped network drive on each computer I believe that it will allow you to save that username and password and for it to automatically be used whenever accessed. or is that your problem, that it won't retain the password?

-nV
Steve AgnewSr. Systems EngineerCommented:
The login script runs before drives are mapped I'm pretty sure.. anyway the guest account exists for what he is trying to do and it's only a makeshift until they bring a domain controller online.. I would almost bet that if you called Microsoft and paid them the whatever their calls go for now they would tell you the same thing... enable the guest and account .. give it NTFS access and Share level read only access to the folder and call it a day...
_KeepItSimple_Author Commented:
Thanks very much for your help! I've managed to get it working using the guest account. I'm still unsure as to why giving the Everyone group access to the share didn't work. If I explicitly give the guest account access (as recommended by DeadNight) then it lets anonymous users in no probs.

It certainly seems that 2003 Server is very reluctant to allow blanket access to a share!

I have yet to check that the security does not over-expose us to the internet but will do this very soon.

Thanks,
D.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.