Solved

Permissions Problem w/Shares

Posted on 2006-11-15
5
158 Views
Last Modified: 2010-04-18
I have a Windows 2003 Server that is part of a domain. I want to create a share on that server which is accessible to people not on the domain. We often have guests in the building that need quick access to a place to store some files, without having to track down an employee and begging their username or password out of them.

On the share I set the Share Permissions for Everyone to Full Control, and on the Security Tab I also set it to Everyone with Full Control.

When I go to a machine that's on the network but not a member of the domain, and try to connect to \\server\share, it still asks me for a username and password.

Any idea of what I'm doing wrong?
0
Comment
Question by:decker12
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 50 total points
ID: 17951100
i think you are misunderstaning what the everyone group is.  Basically despite its name it does NOT include everyone.

http://support.microsoft.com/kb/278259

you are asking if the everyone group includes anonymous users which the article above clearly says it does not.

i would suggest you just create a guest account and have your guests use that account since you dont seem too concerned about security.

that way when guests to your site need to store documents to the share you created and they get prompted for a username and password they can just enter domainNETBIOSname\guestaccountname and the password and they will be in.

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17951123
or you could try using the 'anonymous logon' group when assigning sharing and NTFS permissions.  I have never used it before so i can't comment on if it willl work or not,,,,, but i do know the guestuser account will work fine.

0
 
LVL 1

Author Comment

by:decker12
ID: 17958772
I gave "ANONYMOUS LOGON" group full permissions on the share and sadly, it still asked me for a username and password.

When I go into my AD users and groups, and re-enable the "guest" account, it lets me in without a username and password. Problem is, Guests is a member of Doman Users by default, which basically gives them access to whatever Domain Users have.

What I don't understand is this "Guest" user account. Obviously it's special for some reason, is it the default username that Windows tries to login with when no other credentials are asked for and I try to connect to a share?

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17958864
no, do not use that built in guest account, create a new one from scratch.
yes the guest account is a member of the domian users group, which is why you should NEVER assign NTFS permissions to the domain users group.  It's easy yes, but as you can see it is never good to give blanket access like that.

0
 
LVL 1

Author Comment

by:decker12
ID: 17968662
Thanks for the info. I created a new guest-type of account and will just input the username and password for it every time.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question