Re: Anonymous Acccess to File Share on Windows Server 2003

From: Robert (anonymous_at_anonymous.com)
Date: 02/23/05

  • Next message: z. f.: "auditing on win2003" 
    Date: Tue, 22 Feb 2005 23:38:03 -0800

    I checked that the share and NTFS permissions include Everyone (as well as
    Guest as well as ANONYMOUS LOGON).

    I checked the two local security options you mention below and made sure
    they are disabled.

    The "Access this computer from the network" has Everyone, ANONYMOUS LOGON,
    machine\Guest, domain\Guest, Guests, Users, and a host of others.

    Appreciate the help (I can't believe something so simple is causing such
    pain).

    Have you seen this actually work?

    Thanks,
    Robert

    "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
    news:uYKQgGUGFHA.1068@TK2MSFTNGP14.phx.gbl...
    > OK. Make sure that the share AND ntfs permissions for the folder are set
    > to allow everyone access and also the user right for acc this computer
    > from the network if it already is not an included group. The other thing
    > to check is the two security options - one for do not allow anonymous to
    > enumerate sam and another one for do not allow anonymous from enumerating
    > sam and shares. Set both of those to disabled for the security policy for
    > the server. --- Steve
    >
    >
    > "Robert" <anonymous@anonymous.com> wrote in message
    > news:OlQoQhLGFHA.3792@TK2MSFTNGP10.phx.gbl...
    >> Thanks for the reply.
    >>
    >> I posted this request also to microsoft.public.windows.server.general so
    >> probably best to consilidate the two threads in
    >> microsoft.public.windows.server.general.
    >>
    >> Both you and someone from MSFT gave the same guidance.
    >>
    >> As you can read in the other thread I enabled the guest account and
    >> checked anonymous in Everyone group was enabled.
    >>
    >> I am still getting the request for credentials for non-domain machines
    >> and machines from other domains.
    >>
    >> Any other ideas to check would be appreciated.
    >>
    >> Thanks,
    >> Robert
    >>
    >> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
    >> news:Og50ujJGFHA.1476@TK2MSFTNGP09.phx.gbl...
    >>> You can enable the guest account to allow users unauthenticated access
    >>> to shares on a computer. Then ANY user can access ANY share that has
    >>> permissions for the share and folder [ntfs] for the everyone group as
    >>> long as anonymous is configured to be part of the everyone group. If it
    >>> still does not work check the user right for access this computer from
    >>> the network in Local Security Policy [secpol.msc] to make sure the
    >>> everyone group is included. Of course make sure your firewall protects
    >>> your network from internet users gaining access to that or any computer
    >>> on you etwork. --- Steve
    >>>
    >>>
    >>> "Robert" <anonymous@anonymous.com> wrote in message
    >>> news:OivSjPDGFHA.1924@TK2MSFTNGP14.phx.gbl...
    >>>>I am trying to enable anonymous access to a file share on Windows Server
    >>>> 2003.
    >>>>
    >>>> I have added "ANONYMOUS LOGON" to both the share and NTFS security
    >>>> permissions.
    >>>>
    >>>> When this did not work I also added "EVERYONE" and enabled anonymous as
    >>>> part
    >>>> of EVERYONE group in local security policy.
    >>>>
    >>>> I added the share name to the "Shared that can be accessed anonymously"
    >>>> under local security policy.
    >>>>
    >>>> My non-domain machines still pop up the logon UI when I try and access
    >>>> the
    >>>> share.
    >>>>
    >>>> Any ideas?
    >>>>
    >>>> Thanks,
    >>>> Robert
    >>>>
    >>>>
    >>>>
    >>>
    >>>
    >>
    >>
    >
    >

  • Next message: z. f.: "auditing on win2003"

    Relevant Pages

    • Re: xp pro asks for password
      ... in the left hand pane select Security Options then find "Accounts:\ Guest ... account status". ... "steve freeman" wrote in message ...
      (microsoft.public.windowsxp.network_web)
    • Re: DCOM access from a different domain (yes another accessdenied question)
      ... I still can't get anonymous logon to work, even when I enable the guest ... I originally hoped that having an account in the domain with a matching ... The guest account is disabled by default -- no anonymous logon. ... Restrict Anonymous access is enabled. ...
      (microsoft.public.win32.programmer.ole)
    • Re: Printing to XP from Win98
      ... >under security options for Guest but I don't see a way for specifying a ... >password specific to the Guest account. ... options should be "Set Password". ...
      (microsoft.public.windowsxp.network_web)