Re: Active Directory and Network Shares

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/03/04 

Date: Fri, 3 Dec 2004 01:02:24 -0700

Also, if the shares that are allowing transparent access
on XP are on XP Pro machines, then there may be no
request for authentication because of two reasons.
1. the share may be allowing guest access
or
2. the share may be configured to allow domain users
and the users are logging in with their domain accounts
on the machine from which they access the share (and
so behind the scenes they actually are being authenticated)

You should move all sharing off from the XP Home
and your overall setup issues will be simplified.
If people logged into Home can access the shares on
some other system easily, then you may need to examine
how those shares are secured (and, if they log in with
an account that does not agree with name and password
with another account defined in the domain, then certainly
you need to visit the security settings of those shares). 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Matthew" <turn.deletethis@alltel.net> wrote in message
news:uqFoAcP2EHA.3408@tk2msftngp13.phx.gbl...
> I have a Windows 2000 Server computer with 1 Win2000 Pro, 8 XP Pro, and 2
XP
> Home computers connecting.  Currently it's set up almost like a P2P
network
> with shared printers and files scattered around several computers.
> Of course, the important files are on the server and are backed up
> regularly.
>
> I have set up my users in Active Directory.
> I noticed that to view a file share on the server the user has to provide
> credentials from AD.  The Win2000 box requires credentials from the local
> machine, and the XP boxes don't require any credentials.
>
> I would like to make it so all computers require credentials from AD to
view
> the shared printers and files.
> What is the course you would recommend to accomplish this goal?
>
> Thanks in advance,
>
> Matthew
>
>

Relevant Pages

  • Re: SBS shares. Theres is security. GOT IT!!!
    ... Removal of said "Stored network password" and wham, no more access to SBS ... Then I checked the SBS network shares and yep access granted without any credentials. ... Both you and Jonathan are still not seeing that these 'are' domain users as they 'have' provided the proper authentication to that box. ...
    (microsoft.public.windows.server.sbs)
  • Re: NTService cant access a share (set to everyone)
    ... shares without providing any credentials. ... to "Network access: Shares that can be accessed anonymously " ... Give it a reboot to make sure the policy takes effect (you should be able to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant use WM6 to access network shares
    ... So this seems to be some kind of issue w/ server shares and WM6? ... Can get to about any other share on the network. ... credentials screen I would see if I tried to connect to the share using ...
    (microsoft.public.pocketpc.wireless)
  • RE: help: connect to share - credentials stay
    ... This will delete all shares and credentials ... > folder, to wich the others can connect using the administrator ... > account and pass of the box that shares. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Access Sharing folder
    ... If you have "domain admin" credentials, ... your credentials will allow you to access those shares remotely ... Securing Apache Web Server with thawte Digital Certificate ...
    (Security-Basics)
Loading