Solved

How do I disable anonymous access to my NFTS shares on my windows 2008 servers?

Posted on 2014-12-16
8
142 Views
Last Modified: 2014-12-23
Had a security professional come in and he stated that we had some access security problems; in particular the NTFS shares were allowing "anonymous login's".    I need to disable that function, however I have been unable to find out where or how to do it.

Can anyone give me the steps to do that?
0
Comment
Question by:misterd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 40503638
It is just a user on the security tab of the files and folders, and is not a default. So someone added it at some point.
0
 
LVL 12

Expert Comment

by:andreas
ID: 40503675
to remove it just remove guest access to the shares and disable the guest account if you really dont need it for a special purpose.
0
 
LVL 18

Expert Comment

by:Don S.
ID: 40503709
Everyone = anonymous.  So look for any permissions for Everyone.  He may also be commenting on the common practice of granting Everyone full permissions at the share level.  You could change that to "authenticated users" instead on the share level.  That's on the sharing tab not security tab.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 55

Expert Comment

by:McKnife
ID: 40503938
Why don't you ask that security expert for details?
Anonymous is not the same as everyone. Using everyone in the share permissions does not mean anonymous access is allowed - that was the case with windows 2000, but not any more since win2003.
0
 
LVL 25

Accepted Solution

by:
Lionel MM earned 500 total points
ID: 40504539
Go to the share in question, click on folder properties (right click on folder and then properties), click on the sharing tab, click on sharing or advanced sharing button, then click on add. Then type in "anonymous logon" and then OK and then under the permission select the "Deny" column and deny anonymous access to that share. You will get a warning, read it carefully, and then click OK and test to make sure that making this change will not affect normal operations.
ee-anonymous-acess-warning.jpg
ee-anonymous-acess.jpg
0
 

Author Closing Comment

by:misterd
ID: 40513790
Thks that worked for me and the JPG images were helpful as well
0
 
LVL 25

Expert Comment

by:Lionel MM
ID: 40513834
glad to help--merry Christmas and happy new year
0
 
LVL 55

Expert Comment

by:McKnife
ID: 40515051
misterd, I am unsure that your issue is solved.
Please ask your consultant to specify what he meant by anonymous access - because by default, anonymous will not have access, as I told you before. Unless someone had added anonymous explicitly by name, it would not have access - and you would have seen that.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Suggested Courses

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question