forcing guest account

  • Thread starter Thread starter guyvo
  • Start date Start date
G

guyvo

hi,

I have a small home networking using wirless d-link.
Everything works well except if I want to acces a drive or networking place
on XP i must connect with the guest account. I search the policy but i
didn't found the item to disable it. Anyone knows where ?

thnx.
 
guyvo said:
hi,

I have a small home networking using wirless d-link.
Everything works well except if I want to acces a drive or networking place
on XP i must connect with the guest account. I search the policy but i
didn't found the item to disable it. Anyone knows where ?

thnx.


When you attempt to connect to an XP machine,
and are met with this dialog:

Connecting to XP-BOX
Username: XP-BOX\Guest ( greyed out )
Password:

This means the machine you are attempting to *connect to* is configured
in a non self-consistent way.

This occours when:

The target machine has 'Simple File Sharing' enabled;
(Which sets the Forceguest registry entry to 1 )
( This FORCES all incoming connections to authenticate as 'Guest' )
( That's why the only username you can specify is Guest )

But has the Guest Account Disabled, or passworded.

Simple File Sharing *requires* the guest account to be enabled.
Someone must have gone in and disabled the Guest Account.
( If it is enabled, but passworded, then just supply the password to
connect! )

Fix: You must either:

1) Re-enable the Guest Account:
Start | Run | lusrmgr.msc;
Users;
Dbl-Click 'Guest';
Clear 'Account is Disabled'.

-or-

2) Disable Simple File Sharing, ( hence setting forceguest = 0 )
and then use conventional user accounts and ACLs and all the other
security stuff.

Reboot the target machine, and try to connect again.
 
Ron,

1) Re-enable the Guest Account:

does'nt work
2) Disable Simple File Sharing, ( hence setting forceguest = 0 )

works well fyi it's in the local security policy :
netw acces : sharing and security model for local accounts must set to
"classic-local users authenticate as themselves"

appearently it's an xp policy i can't see it on my laptop which runs on
W2K.
thnx
 
Back
Top