Re: Protecting a Shared Folder?

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 10/05/02


From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Sat, 5 Oct 2002 09:10:43 -0700


> promptem for the password at all... they just get a
> message saying the folder is inaccessible.

Are they by chance using a DOS family OS, like 98/Me ?
The authentication prompt for NT family will allow stating
username and password, but to DOS family only a prompt
for password happens - and that is only if the name they
have "logged" into the Windows client on their Win9x/Me
happens to also be the name of an existing account on the
machine they are attempting to connect with. With the accounts
do not match, they get an immediate sorry its a no go message.
The only solution if they are using downlevel clients is to
have them log into their machines with the name that they
should be using when attempting access to your machine
(well, there is the full-blown Guest alternative, but in your
environment at school this would not be wise).

>From what you have said before, you cannot enable Guest
as that will give too broad of access. Placing a password on
Guest effectively changes it into just any other Users member
account, although it does have one or two hardwired special
properties.

When you go into the advanced Users tool, such as when entering
via Manage in the context menu of My Computer, which you can
also get to by running
control userpasswords2
and then drilling into advanced / advanced
or by running lusrmgr.msc
then you can set the password of Guest, but as was said, this
will really not gain you much of anything.

--
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Gary Koh" <recoil1@cyberway.com.sg> wrote in message
news:5ce801c26c7c$a2a74190$2ae2c90a@phx.gbl...
>
> >-----Original Message-----
> >If you do not want all and everyone accessing the
> >share, do not use "the"  guest account.  The predefined
> >Guest account has a blank password so that the account
> >can log in for anyone without them needing to know
> >the password.   You can set a password on the Guest
> >account, but it is IMO better to just define an account
> >that you will use for this sharing purpose and leave
> >the Guest account alone.
> >You set passwords in the Users applet in control
> >panel, which is also where you would define an
> >account for this use.  Just what you need to do on
> >the share and on the area shared depends some on
> >you version of XP and its current sharing settings.
> >If you do not have NTFS as a filesystem, you should
> >first convert to NTFS before sharing (not required,
> >just something I would recommend).
> >
> >--
> >Roger Abell
> >MS MVP (Security, Windows), MCDBA,  MCSE both
> >Associate Expert - Windows XP ExpertZone
> >http://www.microsoft.com/windowsxp/expertzone
> >
>
> first up roger thanks for the help and advice...
> i've tried as you suggested and added a new user and a
> password and tried using that instead of the guest
> account.  i have disabled simple file sharing and find
> that remote users trying to access the folder don't get
> promptem for the password at all... they just get a
> message saying the folder is inaccessible.  i can loging
> fine however, and this i put down to being a local user
> logged in as admin.  in your last post you also implied
> that a password could be set for a guest account?  i
> don't see how....


Relevant Pages

  • Re: Protecting a Shared Folder?
    ... >> promptem for the password at all... ... >> message saying the folder is inaccessible. ... >happens to also be the name of an existing account on the ... >>From what you have said before, you cannot enable Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: No Guest Account or File Sharing
    ... full Security tab will now be visible when you view a folders properties. ... To make the Guest account visible open the registry editor (Go to Start ... > Folder Options/View tab. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Anonymous Access to Shared Folder
    ... So are you saying that the best way to do this is to enable the guest ... You would be better off enabling the Guest account and granting Guest ... to the folder work. ... I've set the policies in "domain security policy" and even "domain ...
    (microsoft.public.windows.server.security)
  • Blitzed administrator, cant get account back
    ... I've tanked my in-laws computer by creating a guest ... account. ... Console Root folder was empty. ... I can't do a system restore or open the administrators ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Shared Folder not Available
    ... PC2 will connect yo PC1 using the "Guest" account. ... On PC1 give the "Guest" account access to the shared folder and he will be ...
    (microsoft.public.windowsxp.security_admin)