Workgroup clients can access domain shares

[Jamesgang]

I have a sbs 2003 running DHCP. The Guest account has been disabled. I
verified this by the net user guest command.

All share permissions seem to be working fine within the Domain and
the Everyone group is not listed. I have one NT machine that is on a
Workgroup and gets its IP from the sbs server. It has access to all
shares with no apparent restrictions.

Any ideas or direction would be great.

 

[Dobromir Todorov]

You've got either of the following:
1. An open session from the NT machine to your file server with the shares
with an account that has full access to them. To check whether this is the
case, issue the following command from a command line:
net use
In the list of connections, you will probably see an existing session for
which you've provided a valid domain username and password. To stop this
behaviour, simply disconnect the session (loggoff/reboot/or net use /d)
2. A username and a password that match a username and the associated
password in the domain.
If the current username and password of the user on the NT machine match a
domain username and password, this will allow the user to access domain
resources with the priviliges of the domain user. To stop this, make sure
that the username and password on the NT machine don't match a domain
username and password
3. Saved credentials for access to the file server in Credential Manager.
Use Control Panel | User Accounts | Manage my Network Passwords to check
whether this is the case


--
---
HTH,
Dobromir

Learn more about Security and Identity Management:
Visit http://www.iamechanics.com

"Jamesgang" <jamesgang5149@yahoo.com> wrote in message
news:6d9c927e-2225-4b03-9af0-89d38ceafdf2@27g2000hsf.googlegroups.com...
>I have a sbs 2003 running DHCP. The Guest account has been disabled. I
> verified this by the net user guest command.
>
> All share permissions seem to be working fine within the Domain and
> the Everyone group is not listed. I have one NT machine that is on a
> Workgroup and gets its IP from the sbs server. It has access to all
> shares with no apparent restrictions.
>
> Any ideas or direction would be great.