Re: Password required to access \\SERVER
From: David S. (msnewsgroup@studly.net)
Date: 11/06/02
- Next message: Administrator: "HELP!!!!LOG-ON PROBLEMS"
- Previous message: Jim Matthews: "Update 11 - 6, Re: Is secedit.exe left by a hacker?"
- In reply to: Aaron Queenan: "Re: Password required to access \\SERVER"
- Next in thread: Luiz: "Password required to access \\SERVER"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "David S." <msnewsgroup@studly.net> Date: Wed, 6 Nov 2002 10:34:37 -0800
Why not this as a workaround: since you stated that you
basically want/need unauthenicated users to get to a
SoftwareInstall share, setup a guest-like domain account
and specify a login script that might copy some/all of the
SoftwareInstall share locally to the user's machine. Then
they can log off of the guest-like account, log on as the
local administrator and install all their apps from the
local copies. Maybe you could also provide a batch-file
the user could click to clean up the local install files
when they are done.
Of course, local disk space could be an issue.
I would imagine there has to be a better way to do this
using GPO's in Active Directory that would give users
local administrative priviledges without granting domain-
admin priviledges. I'm just not very versed on GPOs yet.
-David S.
>-----Original Message-----
>That would lower the security way too much because
>everyone would be able to access anything on the domain.
>
>What is needed is the ability for unauthenticated users
to
>access the SoftwareInstall share.
>
>>-----Original Message-----
>>use same password for admin or logon to domain
>>success
>>
>>>-----Original Message-----
>>>I'm not sure that local administrator only has access
to
>>>the local computer only because I can connect to my own
>>>domain server and view the shares (but not their
>>contents)
>>>when logged in as a local administrator.
>>>
>>>I think the problem is something to do with the
>>>permissions of the IPC$ share, because IPC$ was public
>in
>>>earlier versions of Windows, and is public by default
>>>anyway.
>>>
>>>Using a domain account wouldn't work, because we want
to
>>>allow the PC 'owner' to be able to install software on
>>the
>>>PC they 'own', but don't want to have to create a
Domain
>>>Admin account for each user which is restricted to
their
>>>computer.
>>>
>>>>-----Original Message-----
>>>>Local administrator by default has access to local
>>>computer only, and access
>>>>to another PC works only if access credentials (user
>>>name/password) are
>>>>exactly the same.
>>>>
>>>>My advise: use domain accounts.
>>>>
>>>>--
>>>>Svyatoslav Pidgorny, MS MVP, MCSE
>>>>-= F1 is the key =-
>>>>
>>>>
>>>>"Aaron Queenan" <aqueenan@contingent.com.au> wrote in
>>>message
>>>>news:671901c28577$349ea5d0$37ef2ecf@TKMSFTNGXA13...
>>>>> When logged in as a local Administrator on a Windows
>>>2000
>>>>> Professional system, and I attempt to browse to a
>>>Windows
>>>>> 2000 Server (e.g. \\SERVER), I am prompted with
>>>an "Enter
>>>>> Network Password" dialog box.
>>>>>
>>>>> What should I change in the server configuration to
>>>allow
>>>>> the local Administrator to see shares available on
>that
>>>>> server?
>>>>>
>>>>> The policy has Everyone in the "Access this computer
>>>from
>>>>> the network" group, and nothing in the "Deny access
>>this
>>>>> computer from the network" group.
- Next message: Administrator: "HELP!!!!LOG-ON PROBLEMS"
- Previous message: Jim Matthews: "Update 11 - 6, Re: Is secedit.exe left by a hacker?"
- In reply to: Aaron Queenan: "Re: Password required to access \\SERVER"
- Next in thread: Luiz: "Password required to access \\SERVER"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
