Click here to get back home

Everyone Share Permissions

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Everyone Share Permissions Broonie 06-24-2008
Posted by Broonie on June 24, 2008, 11:42 am
Please log in for more thread options
I have a file in a share that I want to access from a computer on a
different domain where there is no trust set up between the two
domains. Previously this file was held on a Windows 2000 server and I
had no problems accessing it. Now the file is located on a Windows
2003 server and I can no longer access it. The share permissions are
the same on the new server as they were on the old one and I realise
that the Everyone token is no longer handed out to anonymous logons
anymore by default in 2003 so I enabled the default domain controller
policy setting to allow everyone permissions to apply to anonymous
users. I've also added the anonymous and everyone security groups to
the the pre-windows 2000 compatible security group but I still can't
access the file.
Is there a limitation in 2003 that also says the anonymous user access
request must come from the same domain as the domain on which the
resource being requested exists? If so can someone confirm that this
never used to be the case on 2000 and also help me find a way to
access this file?

Cheers

Posted by Meinolf Weber on June 24, 2008, 5:18 pm
Please log in for more thread options
Hello Broonie,

Check out SMB signing and the differences between th OS verisons.
http://support.microsoft.com/kb/839499/en-us

http://support.microsoft.com/kb/887429

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I have a file in a share that I want to access from a computer on a
> different domain where there is no trust set up between the two
> domains. Previously this file was held on a Windows 2000 server and I
> had no problems accessing it. Now the file is located on a Windows
> 2003 server and I can no longer access it. The share permissions are
> the same on the new server as they were on the old one and I realise
> that the Everyone token is no longer handed out to anonymous logons
> anymore by default in 2003 so I enabled the default domain controller
> policy setting to allow everyone permissions to apply to anonymous
> users. I've also added the anonymous and everyone security groups to
> the the pre-windows 2000 compatible security group but I still can't
> access the file.
> Is there a limitation in 2003 that also says the anonymous user access
> request must come from the same domain as the domain on which the
> resource being requested exists? If so can someone confirm that this
> never used to be the case on 2000 and also help me find a way to
> access this file?
> Cheers
>



Posted by Broonie on June 25, 2008, 9:26 am
Please log in for more thread options
> Hello Broonie,
>
> Check out SMB signing and the differences between th OS
verisons.http://support.microsoft.com/kb/839499/en-us
>
> http://support.microsoft.com/kb/887429
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
>
> > I have a file in a share that I want to access from a computer on a
> > different domain where there is no trust set up between the two
> > domains. Previously this file was held on a Windows 2000 server and I
> > had no problems accessing it. Now the file is located on a Windows
> > 2003 server and I can no longer access it. The share permissions are
> > the same on the new server as they were on the old one and I realise
> > that the Everyone token is no longer handed out to anonymous logons
> > anymore by default in 2003 so I enabled the default domain controller
> > policy setting to allow everyone permissions to apply to anonymous
> > users. I've also added the anonymous and everyone security groups to
> > the the pre-windows 2000 compatible security group but I still can't
> > access the file.
> > Is there a limitation in 2003 that also says the anonymous user access
> > request must come from the same domain as the domain on which the
> > resource being requested exists? If so can someone confirm that this
> > never used to be the case on 2000 and also help me find a way to
> > access this file?
> > Cheers- Hide quoted text -
>
> - Show quoted text -

I've read through both these articles and I can't see how this answers
my question. Neither of the scenarios/symtoms mentioned in kb887429
reflect what is happening in my situation. For one thing the problem
file exists on a member server not a domain controller and for another
I am not attempting to access the file/share while logged in locally.
Could it be something else?

Cheers

Posted by Tom on July 4, 2008, 6:54 am
Please log in for more thread options
first write how are you accessing the file if you are in different
domain and check the security and share permissions.
for remote acces first share then sec perms -both must grant access.

Broonie wrote:
>> Hello Broonie,
>>
>> Check out SMB signing and the differences between th OS
verisons.http://support.microsoft.com/kb/839499/en-us
>>
>> http://support.microsoft.com/kb/887429
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>
>>
>>> I have a file in a share that I want to access from a computer on a
>>> different domain where there is no trust set up between the two
>>> domains. Previously this file was held on a Windows 2000 server and I
>>> had no problems accessing it. Now the file is located on a Windows
>>> 2003 server and I can no longer access it. The share permissions are
>>> the same on the new server as they were on the old one and I realise
>>> that the Everyone token is no longer handed out to anonymous logons
>>> anymore by default in 2003 so I enabled the default domain controller
>>> policy setting to allow everyone permissions to apply to anonymous
>>> users. I've also added the anonymous and everyone security groups to
>>> the the pre-windows 2000 compatible security group but I still can't
>>> access the file.
>>> Is there a limitation in 2003 that also says the anonymous user access
>>> request must come from the same domain as the domain on which the
>>> resource being requested exists? If so can someone confirm that this
>>> never used to be the case on 2000 and also help me find a way to
>>> access this file?
>>> Cheers- Hide quoted text -
>> - Show quoted text -
>
> I've read through both these articles and I can't see how this answers
> my question. Neither of the scenarios/symtoms mentioned in kb887429
> reflect what is happening in my situation. For one thing the problem
> file exists on a member server not a domain controller and for another
> I am not attempting to access the file/share while logged in locally.
> Could it be something else?
>
> Cheers

Posted by Tom on July 4, 2008, 7:43 am
Please log in for more thread options
try resolving the problem by manually adding the special group Everyone
to the Pre-Windows 2000 Compatible Access security group and restarting
the domain controllers in the domain (all of them)
Broonie wrote:
>> Hello Broonie,
>>
>> Check out SMB signing and the differences between th OS
verisons.http://support.microsoft.com/kb/839499/en-us
>>
>> http://support.microsoft.com/kb/887429
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>
>>
>>> I have a file in a share that I want to access from a computer on a
>>> different domain where there is no trust set up between the two
>>> domains. Previously this file was held on a Windows 2000 server and I
>>> had no problems accessing it. Now the file is located on a Windows
>>> 2003 server and I can no longer access it. The share permissions are
>>> the same on the new server as they were on the old one and I realise
>>> that the Everyone token is no longer handed out to anonymous logons
>>> anymore by default in 2003 so I enabled the default domain controller
>>> policy setting to allow everyone permissions to apply to anonymous
>>> users. I've also added the anonymous and everyone security groups to
>>> the the pre-windows 2000 compatible security group but I still can't
>>> access the file.
>>> Is there a limitation in 2003 that also says the anonymous user access
>>> request must come from the same domain as the domain on which the
>>> resource being requested exists? If so can someone confirm that this
>>> never used to be the case on 2000 and also help me find a way to
>>> access this file?
>>> Cheers- Hide quoted text -
>> - Show quoted text -
>
> I've read through both these articles and I can't see how this answers
> my question. Neither of the scenarios/symtoms mentioned in kb887429
> reflect what is happening in my situation. For one thing the problem
> file exists on a member server not a domain controller and for another
> I am not attempting to access the file/share while logged in locally.
> Could it be something else?
>
> Cheers

Similar ThreadsPosted
Share permissions conflicting with NTFS permissions May 18, 2006, 1:16 pm
Extract share permissions November 9, 2005, 8:16 pm
Share permissions - cross-domain May 1, 2006, 11:47 am
Administrator Group Share Permissions July 27, 2006, 11:25 am
NTFS Permissions for public share October 5, 2006, 2:08 pm
Utility to export file, folder, and share permissions July 10, 2006, 7:24 pm
NTFS/Share Permissions design for DFS (Usr->GL[Job Role]->DL[Resource]) October 28, 2006, 9:57 am
MSIE 7 Requires Browser Security Permissions to Run a Network File Share EXE? November 2, 2006, 11:51 pm
ntfs permissions, ownership, adding permissions January 13, 2006, 2:03 pm
Net Share IPC$ /Delete August 3, 2006, 12:57 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap