|
Posted by david carvalho on November 6, 2007, 10:40 am
Please log in for more thread options Hi! thanks for the reply. I'm not sure I've explained this. If a user is
already authenticated, he can access \my.server.name , and it displays all
the shared folders. The idea is to be able to show this, even if the user
hasn't authenticated yet. This is usefull, because I have a local student
account in the workstations, and since they are quite slow, instead of
loading the user profile locally (and it takes longer if it's the first time
the user logs in in that machine), it logs with the local account. But then,
it asks for user/password when accessing \my.server.name.
"Roger Abell [MVP]" wrote:
> David,
>
> I believe that the issue here is not how to enable anonymous access
> but how to resolve the issue whereby people logged into the trusted
> domain are not having their credentials recognized when they try to
> access the folder.
>
> The setting you indicate that adds Anonymous to Everyone is dangerous
> to use, and is not in and of itself sufficient to let unauthenticated access
> to the folder work. You later show that the NTFS is sufficient as it has
> a grant to Everyone (of course, that is provided that it is a DC that shares
> this, as you say you changed that setting for the DCs - double dangerous).
> You did not mention whether the share level permissions allow access
> to Everyone, which is needed also.
>
> So, to the real problem. Is this a forest level trust (W2k3) so that it
> supports Kerberos?
>
> Roger
>
> > Hi !
> > I want users with accounts in a trusted domain to access a network shared
> > folder
> > in my domain. Of course, if they input their password, they can access.
> > But I want to enable the access without prompting the password.
> > I've read "Enable anonymous access on a domain controller" in following
> > link
> >
http://technet2.microsoft.com/windowsserver/en/library/883c10c4-450a-4d0d-bec3-66135f2617111033.mspx#BKMK_DC
> >
> > I've set the policies in "domain security policy" and even "domain
> > controller security policy" none of them worked not even simultaneously.
> > of
> > Course I've run "gpupdate" to.
> > Any ideas please ?
> > Thanks and regards
> > Dave
>
>
>
|