We help IT Professionals succeed at work.

NTFS share that won't ask credentials

415 Views
Last Modified: 2012-06-22
Hi

A 2003 ServerR2 Std as a DC and File Server.

My customer needs to have a "public" share so quests and friends can access the share when connected to LAN and won't be asked for credentials. I'd made a share to which Group Everyone has full Share and NTFS rights.

Still if they try to access the share ("\\servername\Sharename" or "net use x: \\servername\Sharename") the credentials are asked. The Account Quest is disabled. Is there away to access those shares without Domain Computer and credentials?

Thanks,

Juha
Comment
Watch Question

Technology and Business Process Advisor
CERTIFIED EXPERT
Most Valuable Expert 2013
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Premkumar YogeswaranSr. Analyst - System Administrator
CERTIFIED EXPERT

Commented:
Kindly confirm whether the Computer is member of the domain from which you trying to access...!
Also confirm whether this issue is from some particular computer or from all computers.

Thanks

Author

Commented:
Hi

The computer which is trying the access the share is not member (joined) of that domain. Also when ever there will be visitors having their own laptops they too need to gain access to that share. The customers feels that it woulb be nice if no credentials are asked when trying to acccess that share.

I have tested this only with one laptop (my own laptop) which is joined to the whole different domain. I was asked for credentials.

The account Guest is disabled.

Thanks,

Juha

Lee W, MVPTechnology and Business Process Advisor
CERTIFIED EXPERT
Most Valuable Expert 2013

Commented:
IF the system you are connecting TO is NOT a member of the domain, then you can enable the Guest account.  NOTE: if there is ANY important/sensitive/confidential data on this system, then doing this would be a VERY BAD IDEA.  
Premkumar YogeswaranSr. Analyst - System Administrator
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Completely agreed with leew of course - We get similar questions come up, especially with regards to visitors being able to print to our printers.

We simply have a generic account called 'Visitor', which has no access to anything except a single share and the print priviledge to 2 specific printers.

And to be honest, we had a hard enough time getting that approved due to the security risk of a generic account - LET ALONE enabling the GUEST account (which is by far a greater security risk, and I promise we would NEVER have got that signed off - Nor would we have suggested it!).

So again, agreed with leew - I'd tell your customer that making that happen would compromise your network security, and possibly suggest the generic account instead...

Pete

Author

Commented:
Hi

According your suggestions I desided that all visitors need to give credentials to access this "visitor" -share. Haven't told that to the customer so far but I don't believe that this is problem fot them.

The user GUEST will be disabled.

Actually I can make few basic test in the testdomain to see what happens if I use generic account as Pete describes.

Thanks for answers,

Rgs,

Juha

Author

Commented:
Thanks,

Will close this case and do some tests based on your kind answers.

Sorry for the delay. I'm in the great hurry.

Rgs,

Juha
It'll work fine as long as you don't have a problem using a generic account - It's always best practise with generic accounts to use a strong password, though this does tend to annoy people!

We also change the password on a regular basis, and just issue it out to visitors as and when they're on-site.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.