Link to home
Start Free TrialLog in
Avatar of sot010174
sot010174

asked on

Access windows server shares from workgroup

Hello!

I'm running a 2008 server domain, and some computers (for various reasons) run in Workgroup mode.

Problem is: I'm adding a second server to hold some folder and printer shares and for some reason, this new server asks to input the user login (and domain) and password when accessing it, while the old one (2008 GC DC)doesn't. What am I missing?

Thank you in advance,

D.
Avatar of Mike Thomas
Mike Thomas
Flag of United Kingdom of Great Britain and Northern Ireland image

Enable the guest account and make the shares available to the "Everyone" group.

Avatar of sot010174
sot010174

ASKER

Enabling the guest account would work, but I don't have it enabled on the other (the 2008 DC) server. If I try to connect to the old server using a non-existent domain account in workgroup mode it denies the access. I want this to continue to happen. I want to allow access only to workgroup users registred on the AD DS.
What is the point in having a DC if your clients are on a workgroup? join the other server to the domain and get users to use those credentials if you have some configured.

The server is already on the domain. these few client computers NEED to be on Workgroup mode, nothing I can do about it. What I don't get is why doesn't the DC ask to re-athenticate and the member server do?
Another thing: If I input the domain \ domain account and password, it works fine, but I don't want the server to require to re-auth.
I found a workaround for this issue:

I think only domain controllers will accept connections from workgroup computers if their users logins and passwords are registred on the AD DS. Member servers won't authenticate those users.

After hitting my head against the wall I found a solution. I've created an empty folder share on the server named "loginfolder", and I've added the following lines to the workgroup users login script:

echo off
net use p: \\[servernamehere]\loginfolder /user:{domainnamehere}\{usernamehere} {passwordhere}
net use p: /del

This way when the user logs in, the script will connect and authenticate on the member server, add the network drive and then delete it, remaining authenticated.

It's a bit of a redneck solution but it seems to work.
ASKER CERTIFIED SOLUTION
Avatar of sot010174
sot010174

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial