Login's For Shares

[Zulu1001]

Hiya,

We have a little problem with XP Pro box that is used to share files.
What we want to do is have two usernames for a share, one account with
all rights and the other with read-only rights.

I have tried using the Guest account as read only but when the users
select the machine in the workgroup it automatically logs in as the
guest account and not as the privilaged account.

I have tried removing the rights for the guest user and creating two
other users with right, but the users kust get an 'access denied'
message when they try and open the share.

Any ideas what I am doing wrong?

Matt

 

[Pegasus \(MVP\)]

Hiya,

We have a little problem with XP Pro box that is used to share files.
What we want to do is have two usernames for a share, one account with
all rights and the other with read-only rights.

I have tried using the Guest account as read only but when the users
select the machine in the workgroup it automatically logs in as the
guest account and not as the privilaged account.

I have tried removing the rights for the guest user and creating two
other users with right, but the users kust get an 'access denied'
message when they try and open the share.

Any ideas what I am doing wrong?

Matt

Please state if you use Share permissions or NTFS permissions,
or both. You should really use NTFS permissions only, because
they are far more powerful than Share permissions, and set the
Share permissions to "Full access for everyone".

 

[Zulu1001]

I'm using share permissions at the moment because I thought it would be
nice and easy, but it doesn't really matter either way really.

I just need a way to get different users logging in to different
accounts, rather than just defaulting to the guest account.

Cheers

Matt

 

[Pegasus \(MVP\)]

I'm using share permissions at the moment because I thought it would be
nice and easy, but it doesn't really matter either way really.

I just need a way to get different users logging in to different
accounts, rather than just defaulting to the guest account.

Cheers

Matt

It seems your question is about automatic logons rather
than about access permissions. If so then do this:
- Click Start / Run
- Type control userpasswords2 {OK}
- Tick the box that forces users to enter a password
when logging on

You should disable the guest account. It is a security risk.

 

[Torgeir Bakken \(MVP\)]

We have a little problem with XP Pro box that is used to share files.
What we want to do is have two usernames for a share, one account with
all rights and the other with read-only rights.

I have tried using the Guest account as read only but when the users
select the machine in the workgroup it automatically logs in as the
guest account and not as the privilaged account.

I have tried removing the rights for the guest user and creating two
other users with right, but the users kust get an 'access denied'
message when they try and open the share.

Any ideas what I am doing wrong?

Hi

Most likely a ForceGuest issue.

Note that for Windows XP in a workgroup setting, all connections coming
from "the network" will be authenticated as the Guest User.

Note that for WinXP Home you cannot disable the ForceGuest behavior
(only in WinXP Pro).

A direct registry edit is also possible to change this setting:

HOWTO: Validate User Credentials on Microsoft Operating Systems

http://support.microsoft.com/default.aspx?scid=KB;EN-US;180548

<quote>
On Windows XP, the ForceGuest registry value is set to 1 by default in
the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

On a Windows XP computer that is a member of a workgroup:

If ForceGuest is enabled (set to 1), SSPI will always try to log on
using the Guest account.

If the Guest account is enabled, an SSPI logon will succeed as Guest
for any user credentials.

If the Guest account is disabled, an SSPI logon will fail even for
valid credentials.

If ForceGuest is disabled (set to 0), SSPI will log on as the specified
user.

</quote>


More about ForceGuest here as well:

How to Set Security in Windows XP Professional That Is Installed
in a Workgroup
http://support.microsoft.com/default.aspx?scid=kb;en-us;290403

SMTP Authentication Configuration on Windows XP Professional Edition
http://support.microsoft.com/default.aspx?scid=kb;en-us;304707