We have a Windows AD 2003 domain with a share on a Windows 2000 SP4 server
that needs to be accessed by XP machines that are not part of the AD domain.

If I set the share to Everyone/Full Control, the XP machine gets access.
However, if I attempt to tighten-up the security by removing Everyone/FC, I
cannot gain access to the share.
I have looked at giving the Anonymous user permission but cannot get this to
work even hough I think this is the way to go.
Guest account is disabled.
Can anyone point me in the right direction on this ?

Hello Doc,

If you remove eveyone from the share, they are not able to access, like you
see. Make them domain member or leave everyone for access.
Another option can be to create a domain user account and let them setup
a VPN to your server for accessing the share on that server. Ofcourse this
needs additonal configuration and setting up a Remote Access server.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> We have a Windows AD 2003 domain with a share on a Windows 2000 SP4
> server that needs to be accessed by XP machines that are not part of
> the AD domain.
>
> If I set the share to Everyone/Full Control, the XP machine gets
> access.
> However, if I attempt to tighten-up the security by removing
> Everyone/FC, I
> cannot gain access to the share.
> I have looked at giving the Anonymous user permission but cannot get
> this to
> work even hough I think this is the way to go.
> Guest account is disabled.
> Can anyone point me in the right direction on this

Yes, but that is my problem.
I have to remove Everyone/FC to make the share secure from the rest of the
organisation. But this stops the non-domain PCs from accessing it. I cannot
add the PC to the domain for other business reasons.

So my question is: How do the non-domain PCs access the share after I
remove Everyone/FC ?

Thanks.

"Meinolf Weber" wrote:

> Hello Doc,
>
> If you remove eveyone from the share, they are not able to access, like you
> see. Make them domain member or leave everyone for access.
> Another option can be to create a domain user account and let them setup
> a VPN to your server for accessing the share on that server. Ofcourse this
> needs additonal configuration and setting up a Remote Access server.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > We have a Windows AD 2003 domain with a share on a Windows 2000 SP4
> > server that needs to be accessed by XP machines that are not part of
> > the AD domain.
> >
> > If I set the share to Everyone/Full Control, the XP machine gets
> > access.
> > However, if I attempt to tighten-up the security by removing
> > Everyone/FC, I
> > cannot gain access to the share.
> > I have looked at giving the Anonymous user permission but cannot get
> > this to
> > work even hough I think this is the way to go.
> > Guest account is disabled.
> > Can anyone point me in the right direction on this ?
>
>
>

Hello Doc,

Why not using VPN? Your other Business reason would be interesting, because
a lot of companies use domain workstations also for there travelling people.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Yes, but that is my problem.
> I have to remove Everyone/FC to make the share secure from the rest of
> the
> organisation. But this stops the non-domain PCs from accessing it. I
> cannot
> add the PC to the domain for other business reasons.
> So my question is: How do the non-domain PCs access the share after I
> remove Everyone/FC ?
>
> Thanks.
>
> "Meinolf Weber" wrote:
>
>> Hello Doc,
>>
>> If you remove eveyone from the share, they are not able to access,
>> like you
>> see. Make them domain member or leave everyone for access.
>> Another option can be to create a domain user account and let them
>> setup
>> a VPN to your server for accessing the share on that server. Ofcourse
>> this
>> needs additonal configuration and setting up a Remote Access server.
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> We have a Windows AD 2003 domain with a share on a Windows 2000 SP4
>>> server that needs to be accessed by XP machines that are not part of
>>> the AD domain.
>>>
>>> If I set the share to Everyone/Full Control, the XP machine gets
>>> access.
>>> However, if I attempt to tighten-up the security by removing
>>> Everyone/FC, I
>>> cannot gain access to the share.
>>> I have looked at giving the Anonymous user permission but cannot get
>>> this to
>>> work even hough I think this is the way to go.
>>> Guest account is disabled.
>>> Can anyone point me in the right direction on this ?

I don't think "non-domain" PCs can get access without the "Everyone" user
having access. (Someone will correct me if I am wrong.) But you can easily
solve this by setting up a simple FTP server on the Win2k machine for the
other users. FileZilla Server is pretty simple to setup. Google it.
Louis

"Doc" <(E-Mail Removed)> wrote in message
news:27E1D3C4-9D55-4362-A56C-(E-Mail Removed)...
> Yes, but that is my problem.
> I have to remove Everyone/FC to make the share secure from the rest of the
> organisation. But this stops the non-domain PCs from accessing it. I
cannot
> add the PC to the domain for other business reasons.
>
> So my question is: How do the non-domain PCs access the share after I
> remove Everyone/FC ?
>
> Thanks.
>
> "Meinolf Weber" wrote:
>
> > Hello Doc,
> >
> > If you remove eveyone from the share, they are not able to access, like
you
> > see. Make them domain member or leave everyone for access.
> > Another option can be to create a domain user account and let them setup
> > a VPN to your server for accessing the share on that server. Ofcourse
this
> > needs additonal configuration and setting up a Remote Access server.
> >
> > Best regards
> >
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >
> > > We have a Windows AD 2003 domain with a share on a Windows 2000 SP4
> > > server that needs to be accessed by XP machines that are not part of
> > > the AD domain.
> > >
> > > If I set the share to Everyone/Full Control, the XP machine gets
> > > access.
> > > However, if I attempt to tighten-up the security by removing
> > > Everyone/FC, I
> > > cannot gain access to the share.
> > > I have looked at giving the Anonymous user permission but cannot get
> > > this to
> > > work even hough I think this is the way to go.
> > > Guest account is disabled.
> > > Can anyone point me in the right direction on this ?
> >
> >
> >