Click here to get back home

Anonymous folder access

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Anonymous folder access Nate 12-13-2006
Posted by Nate on December 13, 2006, 9:14 pm
Please log in for more thread options
If this is not the correct group for this question please let me know.

I am trying to allow anonymous access to a folder on a win2003 server. Our
network does not use AD, we currently run novell with eDirectory, so the
users do not have rights to windows servers. I have a folder that I would
like to share and allow anonymous access to read and write to. I have tried
everything I know, and can't figure it out. Please offer any suggestions
you may have. If possible, I do not even want a username/password box to
show up on the users screen, I would like for them to be able to access the
share with the UNC name and have it open without ever asking them for a
username. Thanks

Nate


Posted by Mike C. on December 13, 2006, 10:12 pm
Please log in for more thread options
Unless someone else can give you an answer to this, I don't think you've
ever been able to do this. Each user would need a local account on the
system with the same credentials as their local machines for this to work
properly. It's been this way even since the Windows 9x days with folder
sharing.

There might be something you can do with Novell but no idea otherwise :)

> If this is not the correct group for this question please let me know.
>
> I am trying to allow anonymous access to a folder on a win2003 server.
> Our network does not use AD, we currently run novell with eDirectory, so
> the users do not have rights to windows servers. I have a folder that I
> would like to share and allow anonymous access to read and write to. I
> have tried everything I know, and can't figure it out. Please offer any
> suggestions you may have. If possible, I do not even want a
> username/password box to show up on the users screen, I would like for
> them to be able to access the share with the UNC name and have it open
> without ever asking them for a username. Thanks
>
> Nate


Posted by Roger Abell [MVP] on December 14, 2006, 12:32 am
Please log in for more thread options
First, let me just state that allowing anonymous write is a recipe
for disaster as anyone that can reach the machine on the network
is able to fill the disk, which if it is the boot disk can cause the
system to run out of space.

There are two possible routes. One is to enable the Guest account
and grant the needed accesses to Guest at the NTFS and Share levels.
Alternatively one can more deeply weaken the server's defenses by
enabling anonymous access and naming the share as a share that can
be accesses anonymously (this is done in the machines security policy)

> If this is not the correct group for this question please let me know.
>
> I am trying to allow anonymous access to a folder on a win2003 server.
> Our network does not use AD, we currently run novell with eDirectory, so
> the users do not have rights to windows servers. I have a folder that I
> would like to share and allow anonymous access to read and write to. I
> have tried everything I know, and can't figure it out. Please offer any
> suggestions you may have. If possible, I do not even want a
> username/password box to show up on the users screen, I would like for
> them to be able to access the share with the UNC name and have it open
> without ever asking them for a username. Thanks
>
> Nate



Posted by Mike C. on December 14, 2006, 1:22 am
Please log in for more thread options
I tried doing that on my end before making recommendations. I couldn't do
it. Guest account, maybe...didn't try that one...but...definitely the
"Everyone Includes Anonymous" thing did not work, it's the first thing I
thought of :)


> First, let me just state that allowing anonymous write is a recipe
> for disaster as anyone that can reach the machine on the network
> is able to fill the disk, which if it is the boot disk can cause the
> system to run out of space.
>
> There are two possible routes. One is to enable the Guest account
> and grant the needed accesses to Guest at the NTFS and Share levels.
> Alternatively one can more deeply weaken the server's defenses by
> enabling anonymous access and naming the share as a share that can
> be accesses anonymously (this is done in the machines security policy)
>
>> If this is not the correct group for this question please let me know.
>>
>> I am trying to allow anonymous access to a folder on a win2003 server.
>> Our network does not use AD, we currently run novell with eDirectory, so
>> the users do not have rights to windows servers. I have a folder that I
>> would like to share and allow anonymous access to read and write to. I
>> have tried everything I know, and can't figure it out. Please offer any
>> suggestions you may have. If possible, I do not even want a
>> username/password box to show up on the users screen, I would like for
>> them to be able to access the share with the UNC name and have it open
>> without ever asking them for a username. Thanks
>>
>> Nate
>
>


Posted by Mike C. on December 14, 2006, 1:26 am
Please log in for more thread options
Enabling the guest account did it :)


>I tried doing that on my end before making recommendations. I couldn't do
>it. Guest account, maybe...didn't try that one...but...definitely the
>"Everyone Includes Anonymous" thing did not work, it's the first thing I
>thought of :)
>
>
>> First, let me just state that allowing anonymous write is a recipe
>> for disaster as anyone that can reach the machine on the network
>> is able to fill the disk, which if it is the boot disk can cause the
>> system to run out of space.
>>
>> There are two possible routes. One is to enable the Guest account
>> and grant the needed accesses to Guest at the NTFS and Share levels.
>> Alternatively one can more deeply weaken the server's defenses by
>> enabling anonymous access and naming the share as a share that can
>> be accesses anonymously (this is done in the machines security policy)
>>
>>> If this is not the correct group for this question please let me know.
>>>
>>> I am trying to allow anonymous access to a folder on a win2003 server.
>>> Our network does not use AD, we currently run novell with eDirectory, so
>>> the users do not have rights to windows servers. I have a folder that I
>>> would like to share and allow anonymous access to read and write to. I
>>> have tried everything I know, and can't figure it out. Please offer any
>>> suggestions you may have. If possible, I do not even want a
>>> username/password box to show up on the users screen, I would like for
>>> them to be able to access the share with the UNC name and have it open
>>> without ever asking them for a username. Thanks
>>>
>>> Nate
>>
>>
>


Similar ThreadsPosted
Anonymous Access to Shared Folder November 5, 2007, 1:13 pm
Enterprise Ca authority anonymous access January 16, 2007, 4:07 pm
Outlook Compatibility issue with Disabling Anonymous Access September 13, 2007, 2:22 pm
Shares, Named Pipes, and Registry for Anonymous Remote Access February 23, 2007, 2:24 am
Everybody denied access to a folder June 19, 2006, 4:52 am
Deny folder access for administrators January 24, 2006, 4:28 am
Remove List Folder access only? March 16, 2006, 2:18 am
users, groups, and access to a folder May 2, 2006, 11:17 pm
Audit file/folder access February 12, 2007, 10:52 am
Re: Windows 2003: Folder Access Denied October 25, 2005, 10:13 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap