Solved

Permissions Problem w/Shares

Posted on 2006-11-15
5
157 Views
Last Modified: 2010-04-18
I have a Windows 2003 Server that is part of a domain. I want to create a share on that server which is accessible to people not on the domain. We often have guests in the building that need quick access to a place to store some files, without having to track down an employee and begging their username or password out of them.

On the share I set the Share Permissions for Everyone to Full Control, and on the Security Tab I also set it to Everyone with Full Control.

When I go to a machine that's on the network but not a member of the domain, and try to connect to \\server\share, it still asks me for a username and password.

Any idea of what I'm doing wrong?
0
Comment
Question by:decker12
  • 3
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 50 total points
ID: 17951100
i think you are misunderstaning what the everyone group is.  Basically despite its name it does NOT include everyone.

http://support.microsoft.com/kb/278259

you are asking if the everyone group includes anonymous users which the article above clearly says it does not.

i would suggest you just create a guest account and have your guests use that account since you dont seem too concerned about security.

that way when guests to your site need to store documents to the share you created and they get prompted for a username and password they can just enter domainNETBIOSname\guestaccountname and the password and they will be in.

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17951123
or you could try using the 'anonymous logon' group when assigning sharing and NTFS permissions.  I have never used it before so i can't comment on if it willl work or not,,,,, but i do know the guestuser account will work fine.

0
 
LVL 1

Author Comment

by:decker12
ID: 17958772
I gave "ANONYMOUS LOGON" group full permissions on the share and sadly, it still asked me for a username and password.

When I go into my AD users and groups, and re-enable the "guest" account, it lets me in without a username and password. Problem is, Guests is a member of Doman Users by default, which basically gives them access to whatever Domain Users have.

What I don't understand is this "Guest" user account. Obviously it's special for some reason, is it the default username that Windows tries to login with when no other credentials are asked for and I try to connect to a share?

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17958864
no, do not use that built in guest account, create a new one from scratch.
yes the guest account is a member of the domian users group, which is why you should NEVER assign NTFS permissions to the domain users group.  It's easy yes, but as you can see it is never good to give blanket access like that.

0
 
LVL 1

Author Comment

by:decker12
ID: 17968662
Thanks for the info. I created a new guest-type of account and will just input the username and password for it every time.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question