Solved

File sharing authentication when there is no domain

Posted on 2010-11-30
4
665 Views
Last Modified: 2012-06-27
I have read a lot from msdn but couldn't find anything of this case be covered:
In a Windows (XP, Vista, 7) workgroup, no domain applied, box A shares a folder with username/password (or specifies a user-account), when box B trying to map A's shared folder as local drive, what protocol is being used for authentication, Kerberos or NTLM 2? What configuration should I check if I want to force Kerberos? Any official article from MS about this?

Thank you
0
Comment
Question by:sparkythedog
  • 2
4 Comments
 
LVL 5

Expert Comment

by:rotech_IT
ID: 34241274
Active Directory is required for Kerberos authentication.

0
 
LVL 2

Expert Comment

by:kakosi
ID: 34246686
You will have to use local groups or local accounts
0
 

Accepted Solution

by:
sparkythedog earned 0 total points
ID: 34249677
The alternative NTLM protocol is used for authentication if the following conditions exist:
... ...
Computers running Windows 2000 Professional or later and Windows 2000 Server or later use the NTLM protocol to authenticate when they are not participating in a domain–that is, when they operate as stand-alone computers or as part of a workgroup.

from http://technet.microsoft.com/en-us/library/bb457114.aspx
Windows XP Professional Resource Kit
Understanding Logon and Authentication
0
 

Author Closing Comment

by:sparkythedog
ID: 34281090
Found official Microsoft statement for when NTLM is used instead of Kerberos.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Hardening guide / standard used on ATM machines 4 269
PUP or Virus 6 71
What makes a cellular data blocked when cable is not 5 53
Migrating From One Mac To Another 2 48
Read about achieving the basic levels of HRIS security in the workplace.
This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now