Re: Anonymous Printer Share - Access Denied

anonymous_at_discussions.microsoft.com
Date: 04/01/04 

Date: Wed, 31 Mar 2004 14:48:59 -0800

Thanks for the reply, I made sure that was set in all 3
security policies to no avail. Perhaps it is because the
box hosting the shares is a domain controller?

Thanks again for the reply,
John
>-----Original Message-----
>I have never tried what you are doing but check that the
computer offering
>the share does not have the security option effective
setting for
>"additional restrictions for anonymous connections" in
Local Security Policy
>set to anything but "none rely on default permissions" to
see if that
>helps. --- Steve
>
>"John" <anonymous@discussions.microsoft.com> wrote in message
>news:1658201c41745$8923e5f0$a501280a@phx.gbl...
>> We have just migrated from unix to windows 2000 server,
>> with windows 2000 workstations. The domain setup and group
>> policy is great, but we're having trouble with non-domain
>> machines being able to install and print to the shared
>> printers.
>>
>> I have enabled the guest account which has full access to
>> the shared printers on the domain controller, as well as
>> giving everyone full access to the printers. In all
>> security policies, everyone has the ability to access the
>> domain controller from the network.
>>
>> The problem is that when you use Network Neighborhood to
>> browse to the domain controller, it gives a password dialog
>> box which must be populated. If a user on a non-domain
>> machine connect to the pdc before printing, everything
>> works fine. But if those machines are restarted (which
>> happens 12-15 times a day), the user must browse to the pdc
>> using network neighborhood and enter a password before
>> everything will work again.
>>
>> When a non-domain user/box tries to print, it gives an
>> access denied in the printer status. It seems to me that
>> when everyone access is enabled, everyone should be able to
>> print. However, that is not the case.
>>
>> What settings do i need to change to allow
>> non-authenticated users to browse the shares and printers?
>> Users have to log into the domain before they can print,
>> and i'm catching much heat over this.
>>
>> I've spent the last 2 days researching this, and the little
>> information i could find in microsoft's site is wrong (as
>> in the options do not exist where they say, or the command
>> line arguments are just plain wrong)
>>
>> I've read a few posts that say what i want to do is
>> impossible, but i find that difficult to believe.
>>
>> Thanks in advance,
>> John
>
>
>.
>

Relevant Pages

  • Anonymous Printer Share - Access Denied
    ... We have just migrated from unix to windows 2000 server, ... the shared printers on the domain controller, ... domain controller from the network. ... The problem is that when you use Network Neighborhood to ...
    (microsoft.public.win2000.security)
  • Re: Anonymous Printer Share - Access Denied
    ... "additional restrictions for anonymous connections" in Local Security Policy ... > the shared printers on the domain controller, ... > domain controller from the network. ...
    (microsoft.public.win2000.security)
  • Administrative Rights Lost on DC
    ... While implementing security policies on a domain and the domain controller, ... One other example of a problem I am having is the TS logon as administrator. ... The security policy shows that the "Deny Logon Interactively through ...
    (microsoft.public.windows.server.active_directory)
  • Re: Print Server Advertizement Problems
    ... Each building has a domain controller. ... Building B and C have a single server that is ... the printers in the main headquarters. ... The only difference is that the print queues ...
    (microsoft.public.windows.server.general)
  • Re: Printer Disapear from the AD
    ... Look in the event log of the domain controller for when they are getting ... enumerate printers on the print server. ... objects because the DC was disallowed access to the print server. ... Pick up the setprinter.exe tool in the Windows resource kit. ...
    (microsoft.public.win2000.printing)