Re: Making a shared folder accessible to anyone from network
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Sun, 13 Aug 2006 08:44:39 -0700
Hi Pete,
Let me preface this by saying that your application design is severely
limiting your marketability. I believe that most knowlegable administrators
would not like to install something that requires that they enable anonymous
access to a share, and most would be quite mad upon finding that an install
had done so without calling that fact out clearing in the pre-install
requirements
discussions/warnings. I myself would not install that application and if
found
after the fact without a forewarning I would militate against the vendor and
certainly put them on my blacklist to never do further business with in
future.
You need to look at the policy called
Network access: Shares that can be accessed anonymously
and its interaction with the policy called
Network access: Restrict anonymous access to Named Pipes and Shares
and the need to ACL the accessible with the Anonymous Logon principal
For a start search on the first mentioned policy in
http://www.microsoft.com/technet/security/prodtech/windowsserver2003/w2003hg/s3sgch04.mspx
It is the need to enable the second mentioned in order for the first
mentioned
policy to have effect that would cause most knowlegable administrators to
refuse permission to install for your application that requires this
capability.
Roger
"Pete" <no.one@xxxxxxxxxx> wrote in message
news:u4R8RfsvGHA.4460@xxxxxxxxxxxxxxxxxxxxxxx
Hello all!
I'm currently developing an application which should be accessible by
anyone on the Windows network. For this I'd like to create a share that
ANYONE on the network can access. The access only needs to be read-only.
For now I'd like to be able to define this on a Windows XP box.
I have tried editing the local security policy and tried to give anonymous
logon access to the share and the files in it. I don't want to use simple
file sharing, as it's not available when a computer is in a domain. The
solution should make the folder and its contents visible in all of these
scenarios:
- the computer with the shared folder is in a domain
- the computer with the shared folder is not in a domain
- the client computer is in a different domain than the computer with
the shared folder
- the client computer is not in a domain
Is this possible at all? In cases where all computers are in the same
domain, this problem does not exist, but there are all kinds of customer
IT-policies and in those cases the above scenarios might occur.
I'm sorry if this is to be found in a FAQ somwhere; I've googled for many
hours for a solution, but haven't been able to find one.
I'll be grateful for any information on this!
-Pete
.
- Follow-Ups:
- References:
- Prev by Date: Re: Scheduled Tasks Not Running - Error MSG Included
- Next by Date: Re: system restrictions
- Previous by thread: Making a shared folder accessible to anyone from network
- Next by thread: Re: Making a shared folder accessible to anyone from network
- Index(es):
Relevant Pages
|
