Simple Filesharing uses the Guest account (even if the account is disabled), but it requires that "Access this computer from the network" includes Everyone and Guest.
If using WinXP Pro and wants mixed environment where guest should have access to a limited set of folders and special users access more folders, then one have to disable Simple Filesharing (Not possible in WinXP Home):
- Start Button -> My Computer
- In the menu of My Computer select "Tools" -> "Folder Options"
- In "Folder Options" select the "View" fan
- Uncheck the setting "Use Simple File Sharing (Recommended)"
This change should be reflected in this DWORD registry key:[HKEY_LOCAK_MACHINE \SYSTEM \CurrentControlSet \Control \Lsa]
ForceGuest = 0
More Info MS KB290403
More Info MS KB307874
Enable the guest account, so everyone will use that to access your shares:
- Start the Local Security Policies snapin
- Expand "Local Users" -> "Users"
- Right click the "Guest" account and select "Properties"
- Uncheck "Account is disabled"
- Start the Local Security Policies snapin
- Expand "Local Policies" -> "Security options"
- Check that the setting "Network access: Do not allow anonymous enumeration of SAM accounts and shares" is set to disabled
- Start the Local Security Policies snapin
- Expand "Local Policies" -> "Security options"
- Check that "Accounts: Limit local account use of blank passwords to console login only" is disabled.
This change should be reflected in this DWORD registry key:[HKEY_LOCAL_MACHINE \SYSTEM \CurrentControlSet \Control \Lsa]
LimitBlankPasswordUse = 0
Note this will leave all accounts with no password unprotected. Making it possible to perform login over the network.
- Start the Local Security Policies snapin
- Expand "Local Policies" -> "User Rights Assignment"
- Check that "Access this computer from the network" has these groups included "Guests" and "Everyone"
- Check that "Deny access to this computer from the network" doesn't include "Guests" and "Everyone"
- Start the Local Security Policies snapin
- Expand "Local Policies" -> "Security options"
- Check that "Network access: Sharing and security model for local accounts" is set to "Classic: local users authenticate as themselves"
Note the above settings only opens the policies for allowing guests to access the computer. When making a share one have to allow guests to access the share, and if the folder being shared is placed on a NTFS drive, then one have to Set NTFS permissions to allow guest access.
Related Creating a Local Area Network and troubleshooting
More Info Windows XP Professional File Sharing
More Info Windows XP Professional Security Policies
More info MS KB304040
This was such a useful information. Thank you so much.
THX MAN U DA BEST