Solved

Permissions Problem w/Shares

Posted on 2006-11-15
5
155 Views
Last Modified: 2010-04-18
I have a Windows 2003 Server that is part of a domain. I want to create a share on that server which is accessible to people not on the domain. We often have guests in the building that need quick access to a place to store some files, without having to track down an employee and begging their username or password out of them.

On the share I set the Share Permissions for Everyone to Full Control, and on the Security Tab I also set it to Everyone with Full Control.

When I go to a machine that's on the network but not a member of the domain, and try to connect to \\server\share, it still asks me for a username and password.

Any idea of what I'm doing wrong?
0
Comment
Question by:decker12
  • 3
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
mikeleebrla earned 50 total points
ID: 17951100
i think you are misunderstaning what the everyone group is.  Basically despite its name it does NOT include everyone.

http://support.microsoft.com/kb/278259

you are asking if the everyone group includes anonymous users which the article above clearly says it does not.

i would suggest you just create a guest account and have your guests use that account since you dont seem too concerned about security.

that way when guests to your site need to store documents to the share you created and they get prompted for a username and password they can just enter domainNETBIOSname\guestaccountname and the password and they will be in.

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17951123
or you could try using the 'anonymous logon' group when assigning sharing and NTFS permissions.  I have never used it before so i can't comment on if it willl work or not,,,,, but i do know the guestuser account will work fine.

0
 
LVL 1

Author Comment

by:decker12
ID: 17958772
I gave "ANONYMOUS LOGON" group full permissions on the share and sadly, it still asked me for a username and password.

When I go into my AD users and groups, and re-enable the "guest" account, it lets me in without a username and password. Problem is, Guests is a member of Doman Users by default, which basically gives them access to whatever Domain Users have.

What I don't understand is this "Guest" user account. Obviously it's special for some reason, is it the default username that Windows tries to login with when no other credentials are asked for and I try to connect to a share?

0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 17958864
no, do not use that built in guest account, create a new one from scratch.
yes the guest account is a member of the domian users group, which is why you should NEVER assign NTFS permissions to the domain users group.  It's easy yes, but as you can see it is never good to give blanket access like that.

0
 
LVL 1

Author Comment

by:decker12
ID: 17968662
Thanks for the info. I created a new guest-type of account and will just input the username and password for it every time.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now