RE: Re: Funny Windows 2k3 Security "Feature"

["Andrew Aris" <andrew () dev bigfishinternet co uk>]

The 10 users limit is for workstation OSes - not server.

Also this wouldnt solve it since the reason the user is having to type
"Guest" is because they aren't the Guest user and to login using different
credentials to the user account that you are currently logged in as requires
you to (shock of the day!) type the username. This has nothing to do with
whether it is a Samba server or not!

Ways round this would be:

Setup user accounts on the 2K3 server to match the username/passwords being
used on the workstations (the workstations dont need to be on the domain for
this either)

-OR-

(and I really hate this option since it just goes against the
security/auditing grain)

Give the "Anonymous Logon" access to the share (you can either do this
explicitly or enable it to "Let Everyone permissions apply to anonymous
users"), then in the domain security policy you will need to add the shares
to the "Network Access: Shares that can be accessed anonymously." item.

Must admit I've just done the above from memory so I hope I havent missed
anything!

regards,

Andrew

> -----Original Message-----
> From: nikocaine () hotmail com [mailto:nikocaine () hotmail com] 
> Sent: 17 March 2006 19:37
> To: security-basics () securityfocus com
> Subject: Re: Re: Funny Windows 2k3 Security "Feature"
>
> easy, just make a Linux Server with Samba.
> Windows its a bad idea for this task. Just 10 users at same 
> time and full net traffic.
> I made a Linux Server, pretty easy.
> Just install any flavoured Linux, Samba, and configure Samba 
> to accept GUEST account.
> Cheers!
>
> --------------------------------------------------------------
> -------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
> The Norwich University program offers unparalleled Infosec 
> management education and the case study affords you unmatched 
> consulting experience. 
> Tailor your education to your own professional goals with 
> degree customizations including Emergency Management, 
> Business Continuity Planning, Computer Emergency Response 
> Teams, and Digital Investigations. 
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------
> -------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------