win srv 2003 - file sharing

Sicer je to precej nevarno. V določenih primerih ekstremno nevarno.

Vsak pajac se ti lahko priklopi s prenosnikom na eno prazno, ožičeno utp vtičnico in ti malo pregleda vsebino strežnikov. Pa če imaš še kak Wireless, ki ne gre preko firewalla do segmenta, na katerem je server, si lahko sosedovi mulci vzamejo poljubno dolgo časa, da ti pogruntajo geslo/obidejo zaščito na WiFi access pointu, pa iz varne oddaljenosti in domačega naslonjača prebirajo pomembne dokumente.

Če imaš malo uporabnikov (manj kot 10, 15), potem jih vpiši kot lokalne uporabnike v Win2003 SBS z identičnimi gesli, kot jih imajo na svojih mašinah. Pravico za dostop potem nastavi na grupo (Authenticated) Users.

Če imaš več uporabnikov, ne odlašaj s postavitvijo domene. Če ne znaš, se lahko dogovoriva kaj več na ZS.

MS has disabled Anonymous access in this version of Windows. Anonymous access was allowed in Windows NT and 2000. You need to set policy setting using gpedit.msc to enable thia access on server or domain controllers:

Go to gpedit.msc > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options, In right pane edit the following policy setting:

Network access: Let Everyone permissions apply to anonymous users, and then click Properties.

On domain controllers you need to use *Domain Controllers Security Policy* snap-in to enable this access as long as Domain Controller computer account is in "Domain Controllers" OU.

Microsoft has modified share permissions in this version of Windows. The default permissions has been changed to give users only *Read* permission. If users are still unable to access share then modify permissions:

Allow Everyone : Full Control in Share permission.

then change NTFS permissions accordingly or add Everyone Group on Security tab for NTFS permissions.

If users are not able to access shared resources on this server using UNC and get user name and password dialouge box and can access only when you make them member of Administrator group then probably you have Administrators group account listed in the following security setting:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User rights assignment

Policy setting is:

"Access this computer from the network" >> Everyone group or Users group or Authenticated users group must be there in.

Also make sure "Deny access this computer from the network" policy setting is not configured. Deny settings override allow!

Let us know.

Apart from allowing anonymous access, you need to enable it as a Null Session Share; the article below is just for further reference (or older machines), in Server 2003, you can define this in a security policy under Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options, "Network Access: Allow anonymous access to these shares"; add the share name there.

HOW TO: Enable Null Session Shares on a Windows 2000-Based Computer
http://support.microsoft.com/?kbid=2896...

Ok, I have tried those now, and still nothing.

I have changed the "Network access: Let Everyone permissions apply to anonymous users" property to enable.

I have added the share "SHARE" to "Network access: Shares that can be accessed anonymously".

I added "Everyone" full access permissions to the share and also NTFS

And Everyone is allowed to access the server over the network.

But I'm still getting a login UI prompt. :/ Sorry for not getting it yet. there's go to be something im missing. I'll keep looking it over.

Any suggestions are much welcome. I've also raised it to 500 points.

Thanks again!

One more thing that might be in the way: "Network Access: Restrict anonymous access to Named Pipes and Shares"; set this to Disabled.

ust to finalize this question for those who are trying to do this. Enable the Guest account, Do the Solution and assisted solution and Disable "Network Access: Restrict anonymous access to Named Pipes and Shares";

that did the trick for me. Remember that your Windows 2003 machine is now less secure and might be open to hacker or malware.

Thank you!

Jaz sem zadevo nastavil tako da imajo vsi dostop za domačo rabo, tako da gre. Ne spomnim pa se točno kaj vse sem moral spremeniti. Vsekakor pa za firmo tudi če je samo 10 uporabnikov svetujem uporabo domene. Če ne drugega mislim, da na SBS 2003 moraš postavit domeno že zato, ker se ti drugače po eni uri ugasne ali nekaj podobnega, ker kršiš eulo.

Je pa res malo več dela, ko daš računalnike v domeno in moraš še profile kopirat.