Anonymous access to Share

[Guest Doc]

We have a Windows AD 2003 domain with a share on a Windows 2000 SP4 server

that needs to be accessed by XP machines that are not part of the AD domain.

 

If I set the share to Everyone/Full Control, the XP machine gets access.

However, if I attempt to tighten-up the security by removing Everyone/FC, I

cannot gain access to the share.

I have looked at giving the Anonymous user permission but cannot get this to

work even hough I think this is the way to go.

Guest account is disabled.

Can anyone point me in the right direction on this ?

[Guest Meinolf Weber]

Re: Anonymous access to Share

 

Hello Doc,

 

If you remove eveyone from the share, they are not able to access, like you

see. Make them domain member or leave everyone for access.

Another option can be to create a domain user account and let them setup

a VPN to your server for accessing the share on that server. Ofcourse this

needs additonal configuration and setting up a Remote Access server.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> We have a Windows AD 2003 domain with a share on a Windows 2000 SP4

> server that needs to be accessed by XP machines that are not part of

> the AD domain.

>

> If I set the share to Everyone/Full Control, the XP machine gets

> access.

> However, if I attempt to tighten-up the security by removing

> Everyone/FC, I

> cannot gain access to the share.

> I have looked at giving the Anonymous user permission but cannot get

> this to

> work even hough I think this is the way to go.

> Guest account is disabled.

> Can anyone point me in the right direction on this ?

[Guest Doc]

Re: Anonymous access to Share

 

Yes, but that is my problem.

I have to remove Everyone/FC to make the share secure from the rest of the

organisation. But this stops the non-domain PCs from accessing it. I cannot

add the PC to the domain for other business reasons.

 

So my question is: How do the non-domain PCs access the share after I

remove Everyone/FC ?

 

Thanks.

 

"Meinolf Weber" wrote:

> Hello Doc,

>

> If you remove eveyone from the share, they are not able to access, like you

> see. Make them domain member or leave everyone for access.

> Another option can be to create a domain user account and let them setup

> a VPN to your server for accessing the share on that server. Ofcourse this

> needs additonal configuration and setting up a Remote Access server.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > We have a Windows AD 2003 domain with a share on a Windows 2000 SP4

> > server that needs to be accessed by XP machines that are not part of

> > the AD domain.

> >

> > If I set the share to Everyone/Full Control, the XP machine gets

> > access.

> > However, if I attempt to tighten-up the security by removing

> > Everyone/FC, I

> > cannot gain access to the share.

> > I have looked at giving the Anonymous user permission but cannot get

> > this to

> > work even hough I think this is the way to go.

> > Guest account is disabled.

> > Can anyone point me in the right direction on this ?

>

>

>

[Guest Meinolf Weber]

Re: Anonymous access to Share

 

Hello Doc,

 

Why not using VPN? Your other Business reason would be interesting, because

a lot of companies use domain workstations also for there travelling people.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Yes, but that is my problem.

> I have to remove Everyone/FC to make the share secure from the rest of

> the

> organisation. But this stops the non-domain PCs from accessing it. I

> cannot

> add the PC to the domain for other business reasons.

> So my question is: How do the non-domain PCs access the share after I

> remove Everyone/FC ?

>

> Thanks.

>

> "Meinolf Weber" wrote:

>

>> Hello Doc,

>>

>> If you remove eveyone from the share, they are not able to access,

>> like you

>> see. Make them domain member or leave everyone for access.

>> Another option can be to create a domain user account and let them

>> setup

>> a VPN to your server for accessing the share on that server. Ofcourse

>> this

>> needs additonal configuration and setting up a Remote Access server.

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers

>> no rights.

>> ** Please do NOT email, only reply to Newsgroups

>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> We have a Windows AD 2003 domain with a share on a Windows 2000 SP4

>>> server that needs to be accessed by XP machines that are not part of

>>> the AD domain.

>>>

>>> If I set the share to Everyone/Full Control, the XP machine gets

>>> access.

>>> However, if I attempt to tighten-up the security by removing

>>> Everyone/FC, I

>>> cannot gain access to the share.

>>> I have looked at giving the Anonymous user permission but cannot get

>>> this to

>>> work even hough I think this is the way to go.

>>> Guest account is disabled.

>>> Can anyone point me in the right direction on this ?

[Guest 3c273]

Re: Anonymous access to Share

 

I don't think "non-domain" PCs can get access without the "Everyone" user

having access. (Someone will correct me if I am wrong.) But you can easily

solve this by setting up a simple FTP server on the Win2k machine for the

other users. FileZilla Server is pretty simple to setup. Google it.

Louis

 

"Doc" <Doc@discussions.microsoft.com> wrote in message

news:27E1D3C4-9D55-4362-A56C-40AF9FAE5048@microsoft.com...

> Yes, but that is my problem.

> I have to remove Everyone/FC to make the share secure from the rest of the

> organisation. But this stops the non-domain PCs from accessing it. I

cannot

> add the PC to the domain for other business reasons.

>

> So my question is: How do the non-domain PCs access the share after I

> remove Everyone/FC ?

>

> Thanks.

>

> "Meinolf Weber" wrote:

>

> > Hello Doc,

> >

> > If you remove eveyone from the share, they are not able to access, like

you

> > see. Make them domain member or leave everyone for access.

> > Another option can be to create a domain user account and let them setup

> > a VPN to your server for accessing the share on that server. Ofcourse

this

> > needs additonal configuration and setting up a Remote Access server.

> >

> > Best regards

> >

> > Meinolf Weber

> > Disclaimer: This posting is provided "AS IS" with no warranties, and

confers

> > no rights.

> > ** Please do NOT email, only reply to Newsgroups

> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> >

> > > We have a Windows AD 2003 domain with a share on a Windows 2000 SP4

> > > server that needs to be accessed by XP machines that are not part of

> > > the AD domain.

> > >

> > > If I set the share to Everyone/Full Control, the XP machine gets

> > > access.

> > > However, if I attempt to tighten-up the security by removing

> > > Everyone/FC, I

> > > cannot gain access to the share.

> > > I have looked at giving the Anonymous user permission but cannot get

> > > this to

> > > work even hough I think this is the way to go.

> > > Guest account is disabled.

> > > Can anyone point me in the right direction on this ?

> >

> >

> >