RE: Funny Windows 2k3 Security "Feature"





If you need something cheap and quick than I personally would just forget
about running windows all together. Grab a Linux distro you like and run
samba or ftp.

If that doesn't work for you use a liveCD or a floppy distro like this
instead:
http://www.serverelements.com/naslite.php

If you go with windows then the server will require that everyone that
accesses it, needs to have a local account.

Just keep in mind the security risks of running an open server like this.




R. James Stull
Network Administrator
Caterpillar, Lafayette Engine Center
Phone - 765.448.2356
Email - stullrj@xxxxxxx






"Beauford, Jason"
<jbeauford@EightI
nOnePet.com>
To
03/16/2006 10:38 To
AM <kevinlh@xxxxxxxxxxx>
<security-basics@xxxxxxxxxxxxxxxxx>
cc





Subject
RE: Funny Windows 2k3 Security
"Feature"









Caterpillar: Confidential Green Retain Until: 04/15/2006
Retention Category: G90 -
General
Matters/Administration


If all you want to do is share files, why pay for the WS03 license?
There are a plethora of setups to accommodate your needs.

Here's one: Contribs SME Server, http://contribs.org/modules/news/

Nice and simple solution.

-JMB

| -----Original Message-----
| From: kevinlh@xxxxxxxxxxx [mailto:kevinlh@xxxxxxxxxxx]
| Sent: Wednesday, March 15, 2006 1:18 PM
| To: security-basics@xxxxxxxxxxxxxxxxx
| Subject: Funny Windows 2k3 Security "Feature"
|
| I have a mobile unit of servers that are basically
| file storage for wifi laptops. The people that use
| the systems want to push a button and have
| everything work. Don't want a domain, don't want
| passwords, just want a central file system that
| everyone can rwxd. So I fired up MMC and added
| Security Analysis and Configuration... and turned on
| anonymous access to shares, enabled blank passwords
| for non-console users, enabled guest, etc. I set
| guest password blank, and theoretically i should
| brose to \\unsecuredserver\sharename and not be
| prompted for a password right? WRONG! No matter what
| combination of Local Sec Policies I set, I am always
| promted for a password. I was sure there was a way
| around it, but none that I have found. I ALWAYS have
| to type guest, and apparently this is too difficult
| for some people. <shrug> Any ideas?
|
| -----------------------------------------------------
| ----------------------
| EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE -
| ONLINE The Norwich University program offers
| unparalleled Infosec management education and the
| case study affords you unmatched consulting experience.
| Tailor your education to your own professional goals
| with degree customizations including Emergency
| Management, Business Continuity Planning, Computer
| Emergency Response Teams, and Digital Investigations.
|
| http://www.msia.norwich.edu/secfocus
| -----------------------------------------------------
| ----------------------
|
|

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------