Solved

Permissions Problem w/Shares

Posted on 2006-11-15
5
160 Views
Last Modified: 2010-04-18
I have a Windows 2003 Server that is part of a domain. I want to create a share on that server which is accessible to people not on the domain. We often have guests in the building that need quick access to a place to store some files, without having to track down an employee and begging their username or password out of them.

On the share I set the Share Permissions for Everyone to Full Control, and on the Security Tab I also set it to Everyone with Full Control.

When I go to a machine that's on the network but not a member of the domain, and try to connect to \\server\share, it still asks me for a username and password.

Any idea of what I'm doing wrong?
0
Comment
Question by:decker12
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 50 total points
ID: 17951100
i think you are misunderstaning what the everyone group is.  Basically despite its name it does NOT include everyone.

http://support.microsoft.com/kb/278259

you are asking if the everyone group includes anonymous users which the article above clearly says it does not.

i would suggest you just create a guest account and have your guests use that account since you dont seem too concerned about security.

that way when guests to your site need to store documents to the share you created and they get prompted for a username and password they can just enter domainNETBIOSname\guestaccountname and the password and they will be in.

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17951123
or you could try using the 'anonymous logon' group when assigning sharing and NTFS permissions.  I have never used it before so i can't comment on if it willl work or not,,,,, but i do know the guestuser account will work fine.

0
 
LVL 1

Author Comment

by:decker12
ID: 17958772
I gave "ANONYMOUS LOGON" group full permissions on the share and sadly, it still asked me for a username and password.

When I go into my AD users and groups, and re-enable the "guest" account, it lets me in without a username and password. Problem is, Guests is a member of Doman Users by default, which basically gives them access to whatever Domain Users have.

What I don't understand is this "Guest" user account. Obviously it's special for some reason, is it the default username that Windows tries to login with when no other credentials are asked for and I try to connect to a share?

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17958864
no, do not use that built in guest account, create a new one from scratch.
yes the guest account is a member of the domian users group, which is why you should NEVER assign NTFS permissions to the domain users group.  It's easy yes, but as you can see it is never good to give blanket access like that.

0
 
LVL 1

Author Comment

by:decker12
ID: 17968662
Thanks for the info. I created a new guest-type of account and will just input the username and password for it every time.
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question