Workgroup clients can access domain shares

[Guest Jamesgang]

I have a sbs 2003 running DHCP. The Guest account has been disabled. I

verified this by the net user guest command.

 

All share permissions seem to be working fine within the Domain and

the Everyone group is not listed. I have one NT machine that is on a

Workgroup and gets its IP from the sbs server. It has access to all

shares with no apparent restrictions.

 

Any ideas or direction would be great.

[Guest Dobromir Todorov]

You've got either of the following:

1. An open session from the NT machine to your file server with the shares

with an account that has full access to them. To check whether this is the

case, issue the following command from a command line:

net use

In the list of connections, you will probably see an existing session for

which you've provided a valid domain username and password. To stop this

behaviour, simply disconnect the session (loggoff/reboot/or net use /d)

2. A username and a password that match a username and the associated

password in the domain.

If the current username and password of the user on the NT machine match a

domain username and password, this will allow the user to access domain

resources with the priviliges of the domain user. To stop this, make sure

that the username and password on the NT machine don't match a domain

username and password

3. Saved credentials for access to the file server in Credential Manager.

Use Control Panel | User Accounts | Manage my Network Passwords to check

whether this is the case

 

 

--

---

HTH,

Dobromir

 

Learn more about Security and Identity Management:

Visit http://www.iamechanics.com

 

"Jamesgang" <jamesgang5149@yahoo.com> wrote in message

news:6d9c927e-2225-4b03-9af0-89d38ceafdf2@27g2000hsf.googlegroups.com...<span style="color:blue">

>I have a sbs 2003 running DHCP. The Guest account has been disabled. I

> verified this by the net user guest command.

>

> All share permissions seem to be working fine within the Domain and

> the Everyone group is not listed. I have one NT machine that is on a

> Workgroup and gets its IP from the sbs server. It has access to all

> shares with no apparent restrictions.

>

> Any ideas or direction would be great. </span>