RE: Funny Windows 2k3 Security "Feature"

["Beauford, Jason" <jbeauford () EightInOnePet com>]

If all you want to do is share files, why pay for the WS03 license?
There are a plethora of setups to accommodate your needs.

Here's one:  Contribs SME Server, http://contribs.org/modules/news/

Nice and simple solution.

-JMB 

        |  -----Original Message-----
        |  From: kevinlh () hotmail com [mailto:kevinlh () hotmail com] 
        |  Sent: Wednesday, March 15, 2006 1:18 PM
        |  To: security-basics () securityfocus com
        |  Subject: Funny Windows 2k3 Security "Feature"
        |  
        |  I have a mobile unit of servers that are basically 
        |  file storage for wifi laptops. The people that use 
        |  the systems want to push a button and have 
        |  everything work. Don't want a domain, don't want 
        |  passwords, just want a central file system that 
        |  everyone can rwxd. So I fired up MMC and added 
        |  Security Analysis and Configuration... and turned on 
        |  anonymous access to shares, enabled blank passwords 
        |  for non-console users, enabled guest, etc. I set 
        |  guest password blank, and theoretically i should 
        |  brose to \\unsecuredserver\sharename and not be 
        |  prompted for a password right? WRONG! No matter what 
        |  combination of Local Sec Policies I set, I am always 
        |  promted for a password. I was sure there was a way 
        |  around it, but none that I have found. I ALWAYS have 
        |  to type guest, and apparently this is too difficult 
        |  for some people. <shrug> Any ideas?
        |  
        |  -----------------------------------------------------
        |  ----------------------
        |  EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - 
        |  ONLINE The Norwich University program offers 
        |  unparalleled Infosec management education and the 
        |  case study affords you unmatched consulting experience. 
        |  Tailor your education to your own professional goals 
        |  with degree customizations including Emergency 
        |  Management, Business Continuity Planning, Computer 
        |  Emergency Response Teams, and Digital Investigations. 
        |  
        |  http://www.msia.norwich.edu/secfocus
        |  -----------------------------------------------------
        |  ----------------------
        |  
        |  

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------