unrestricted access to a file share

unrestricted access to a file share
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
unrestricted access to a file share Dragon Lord 02-23-2006
Posted by =?Utf-8?B?RHJhZ29uIExvcmQ=?= on February 23, 2006, 1:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The way my business is set up, I need to create a file share that can be
accessed by anyone. The servers will be deployed in the field with no access
to the Internet or the central office. Users will need to access the
fileshare that have never been defined on the server (neither the user or the
server are domain members) when they are at the remote site.

My Share permissions are Everyone for full/change/read.
My NTFS permissions are Everyone for read/write/execute

I have added anonymous logon to everyone through the security policy, and
have even tried enabling null shares. Neither worked. Whenever I access the
stand alone server, it challanges me for credentials.

Is there any way to open up the fileshare so it does not need to
authenticate the user?

Thanks

Posted by Shenan Stanley on February 23, 2006, 3:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Dragon Lord wrote:
> The way my business is set up, I need to create a file share that
> can be accessed by anyone. The servers will be deployed in the
> field with no access to the Internet or the central office. Users
> will need to access the fileshare that have never been defined on
> the server (neither the user or the server are domain members) when
> they are at the remote site.
>
> My Share permissions are Everyone for full/change/read.
> My NTFS permissions are Everyone for read/write/execute
>
> I have added anonymous logon to everyone through the security
> policy, and have even tried enabling null shares. Neither worked.
> Whenever I access the stand alone server, it challanges me for
> credentials.
>
> Is there any way to open up the fileshare so it does not need to
> authenticate the user?

Why not instead just give it credentials?
A username/password and give that to the users/put it in a script they run
to map - etc..

It's better than an open share no matter how remote the server is.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



Posted by Roger Abell [MVP] on February 23, 2006, 8:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I tend to agree with Shenan, even use of a generically shared username/pwd
that all at the location know is likely better than havng the share
wideopen.
However, given that "the servers will . . . not access to the Internet",
perhaps
not that much is gained IF that means no one from the internet will have
access
to the server - even in event of a compromised workstation on that network
that does have access.
I believe you need to add the share in the policy found in the security
options
area, named something to effect "shares that may be accessed anonymously"

> The way my business is set up, I need to create a file share that can be
> accessed by anyone. The servers will be deployed in the field with no
> access
> to the Internet or the central office. Users will need to access the
> fileshare that have never been defined on the server (neither the user or
> the
> server are domain members) when they are at the remote site.
>
> My Share permissions are Everyone for full/change/read.
> My NTFS permissions are Everyone for read/write/execute
>
> I have added anonymous logon to everyone through the security policy, and
> have even tried enabling null shares. Neither worked. Whenever I access
> the
> stand alone server, it challanges me for credentials.
>
> Is there any way to open up the fileshare so it does not need to
> authenticate the user?
>
> Thanks



Posted by Steven L Umbach on February 23, 2006, 9:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
If that is really what you want to do try enabling the guest account on the
server. In addition you may need to configure in Local Security Policy
[secpol.msc] the security option for accounts: limit local account use of
blank passwords to console logon only to be disabled and the security option
for network access: let everyone permissions apply to anonymous users to be
enabled. --- Steve


> The way my business is set up, I need to create a file share that can be
> accessed by anyone. The servers will be deployed in the field with no
> access
> to the Internet or the central office. Users will need to access the
> fileshare that have never been defined on the server (neither the user or
> the
> server are domain members) when they are at the remote site.
>
> My Share permissions are Everyone for full/change/read.
> My NTFS permissions are Everyone for read/write/execute
>
> I have added anonymous logon to everyone through the security policy, and
> have even tried enabling null shares. Neither worked. Whenever I access
> the
> stand alone server, it challanges me for credentials.
>
> Is there any way to open up the fileshare so it does not need to
> authenticate the user?
>
> Thanks



Similar ThreadsPosted
Secure file share access between 2 computers September 4, 2005, 2:06 pm
Execute File Auditing on a File Share April 25, 2007, 11:46 pm
Re: Accessing a file share again without needing Admin credentials March 27, 2007, 10:44 pm
computer's file share(read& write) be accessed readonly? September 4, 2005, 8:44 am
Re: Anonymous (NULL user) access to a Share July 30, 2005, 11:21 pm
Access denied on share, how to reset to default security settings? November 28, 2007, 6:39 pm
Giving access to a share folder in domain A to users in Domain B May 17, 2007, 2:22 pm
File Access Log September 27, 2005, 9:55 pm
Re: Folder/File access November 23, 2005, 10:08 am
Folder/File access November 20, 2005, 10:27 am

The site map in XML format XML site map

Contact Us | Privacy Policy