Solved

Permissions Problem w/Shares

Posted on 2006-11-15
5
156 Views
Last Modified: 2010-04-18
I have a Windows 2003 Server that is part of a domain. I want to create a share on that server which is accessible to people not on the domain. We often have guests in the building that need quick access to a place to store some files, without having to track down an employee and begging their username or password out of them.

On the share I set the Share Permissions for Everyone to Full Control, and on the Security Tab I also set it to Everyone with Full Control.

When I go to a machine that's on the network but not a member of the domain, and try to connect to \\server\share, it still asks me for a username and password.

Any idea of what I'm doing wrong?
0
Comment
Question by:decker12
  • 3
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 50 total points
ID: 17951100
i think you are misunderstaning what the everyone group is.  Basically despite its name it does NOT include everyone.

http://support.microsoft.com/kb/278259

you are asking if the everyone group includes anonymous users which the article above clearly says it does not.

i would suggest you just create a guest account and have your guests use that account since you dont seem too concerned about security.

that way when guests to your site need to store documents to the share you created and they get prompted for a username and password they can just enter domainNETBIOSname\guestaccountname and the password and they will be in.

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17951123
or you could try using the 'anonymous logon' group when assigning sharing and NTFS permissions.  I have never used it before so i can't comment on if it willl work or not,,,,, but i do know the guestuser account will work fine.

0
 
LVL 1

Author Comment

by:decker12
ID: 17958772
I gave "ANONYMOUS LOGON" group full permissions on the share and sadly, it still asked me for a username and password.

When I go into my AD users and groups, and re-enable the "guest" account, it lets me in without a username and password. Problem is, Guests is a member of Doman Users by default, which basically gives them access to whatever Domain Users have.

What I don't understand is this "Guest" user account. Obviously it's special for some reason, is it the default username that Windows tries to login with when no other credentials are asked for and I try to connect to a share?

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17958864
no, do not use that built in guest account, create a new one from scratch.
yes the guest account is a member of the domian users group, which is why you should NEVER assign NTFS permissions to the domain users group.  It's easy yes, but as you can see it is never good to give blanket access like that.

0
 
LVL 1

Author Comment

by:decker12
ID: 17968662
Thanks for the info. I created a new guest-type of account and will just input the username and password for it every time.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question