Put IIS on the box. Install "Internet Printing" and "WebDAV". Publish the
folder containing the shares in IIS, granting anonymous access to the Virtual
Folders. Publish you printer in IIS and grant anonymous access to the
"Printers" virtual folder also.
 
 
On the NTFS properties of the folder, grant at least "read" access to the
"Internet Guest Account".
 
Now direct the users to use their BROWSERS to request the resources by doing
(using IE for an example) File -> Open ->"Open as Web Folder" for the shares.
For the printers, no need to do "Open as web Folder". This *should* work.
 
 
Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon

________________________________

From: [EMAIL PROTECTED] on behalf of Noah Eiger
Sent: Thu 9/29/2005 2:24 PM
To: [email protected]
Subject: RE: [ActiveDir] OT: Guest Access w/o Credential Prompt


Tried that too. No luck.


________________________________

        From: Thommes, Michael M. [mailto:[EMAIL PROTECTED] 
        Sent: Thursday, September 29, 2005 2:02 PM
        To: [email protected]
        Subject: RE: [ActiveDir] OT: Guest Access w/o Credential Prompt
        
        

        I believe the guest account should have no password.

         

        Mike Thommes

         

        -----Original Message-----
        From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger
        Sent: Thursday, September 29, 2005 3:28 PM
        To: [email protected]
        Subject: [ActiveDir] OT: Guest Access w/o Credential Prompt

         

        Hello:

         

        Please do not flame me for asking this. I would like to open a
non-domain Windows Server 2003 box for anonymous Guest access to two shares
and a printer without being prompted from the client. (Yes, I am aware that
MS has spent lots of time making this very difficult to accomplish and that
it is a huge no no. Client is aware of why this is so bad and demands it
anyway.) Based on various Googling, I have tried the following steps in order
(from my notes):

         

        To allow guest access
        - enabled Guest account
        - explicitly added Guests group to Share permissions and NTFS
permissions for Data and Finance shares
        - Added Guest user to Security Settings\Local Policies\User Rights
Assignments\Access this computer from the network
        - Gave Guest user a password.
        - Set Security Settings\Local Policies\Security Options\Network
Access: Do not allow anonymouns enumeration of SAM accounts to Disabled.
(Default is Enabled)
        - Set Security Settings\Local Policies\Security Options\Network
Access: Let Everyone permissions apply to anonymouns users to Enabled
(Default is Disabled)
        - Set Security Settings\Local Policies\Security Options\Network
Access: Sharing and security model for local accounts to Guests only (Default
is Classic)

        Despite all this, the user still gets prompted for credentials. 

         

        Thanks.

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to