Home All Groups Group Topic Archive Search About

Accessing a hidden share without an account on the local machine

Author
22 Sep 2006 4:09 PM
Chris Barnes
Are there issues about accessing a hidden share in WinXP (pro) that I'm
not understanding?

Situation:
a) a whole building of users (all on same subnet)

b) I have some files in a share that I want everyone in my building to
see, but the share is hidden (eg. MyFiles$) because I don't want it to
show up in My Network Places.

c) Accessing hidden shares works perfectly if I use an account/passwd on
that machine.  But I want it to use the Guest logon  (yes, I know that
this is not the same Guest as what shows up under the account manager).

d) Attempting to access shares (either hidden or non-hidden) from a
computer without a matching userid brings up a box asking for a
userid/password (*here* is the problem).

e) The only firewall on the system is the one built into Windows.  Looking
at the Firewall settings shows a checkmark next to "File and Printer
Sharing" in the Exceptions tab.  The ports open in that are TCP 139, TCP
445, UDP 137, & UDP 138 (all with a scope of "any").

f) Simple file sharing is turned OFF
Turning on "simple file sharing" (and sharing the folder non-hidden with
the box "allow network users to change my files" checked - and it shows
"Windows Firewall is configured to allow this folder to be shared with
other computers on the network"), results in the message "\\computer is
not accessable.  You might not have permission to use the network
resource.  Contact the administrator... blah blah blah."





--

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes                           AOL IM: CNBarnes
chris-bar***@tamu.edu                Yahoo IM: chrisnbarnes
Computer Systems Manager               MSN IM: ch***@txbarnes.com
Department of Physics                      ph: 979-845-7801
Texas A&M University                      fax: 979-845-2590

Author
22 Sep 2006 5:02 PM
Ian
There is nothing special about hidden shares, other than that they're hidden.

You should be able to access the hidden share with

net use  (drive:)  \\server\share$  /user:username password

An oft-overlooked aspect of guest networking is that it only applies if NO
user-account on the server matches that which the client specifies. In other
words, a 'real' account is still used in preference to Guest. This can cause
denial of access if the real account has less priveleges than Guest.  I
wonder if this might be your problem?



-------------------------------

An alternative approach to XP network logon -  http://mylogon.net
Author
22 Sep 2006 5:34 PM
Chuck
Show quote Hide quote
On Fri, 22 Sep 2006 11:09:41 -0500, "Chris Barnes" <chris-bar***@tamu.edu>
wrote:

>Are there issues about accessing a hidden share in WinXP (pro) that I'm
>not understanding?
>
>Situation:
>a) a whole building of users (all on same subnet)
>
>b) I have some files in a share that I want everyone in my building to
>see, but the share is hidden (eg. MyFiles$) because I don't want it to
>show up in My Network Places.
>
>c) Accessing hidden shares works perfectly if I use an account/passwd on
>that machine.  But I want it to use the Guest logon  (yes, I know that
>this is not the same Guest as what shows up under the account manager).
>
>d) Attempting to access shares (either hidden or non-hidden) from a
>computer without a matching userid brings up a box asking for a
>userid/password (*here* is the problem).
>
>e) The only firewall on the system is the one built into Windows.  Looking
>at the Firewall settings shows a checkmark next to "File and Printer
>Sharing" in the Exceptions tab.  The ports open in that are TCP 139, TCP
>445, UDP 137, & UDP 138 (all with a scope of "any").
>
>f) Simple file sharing is turned OFF
>Turning on "simple file sharing" (and sharing the folder non-hidden with
>the box "allow network users to change my files" checked - and it shows
>"Windows Firewall is configured to allow this folder to be shared with
>other computers on the network"), results in the message "\\computer is
>not accessable.  You might not have permission to use the network
>resource.  Contact the administrator... blah blah blah."

Chris,

Check the restrictanonymous setting.
<http://nitecruzr.blogspot.com/2005/07/restrictanonymous-and-your-server.html>
http://nitecruzr.blogspot.com/2005/07/restrictanonymous-and-your-server.html

And make sure that Guest is properly activated for network access.
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.
Author
25 Sep 2006 4:11 PM
Chris Barnes
Chuck <n***@example.net> wrote:
Thank you very much.  The first link was exactly what I needed.




--

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes                           AOL IM: CNBarnes
chris-bar***@tamu.edu                Yahoo IM: chrisnbarnes
Computer Systems Manager               MSN IM: ch***@txbarnes.com
Department of Physics                      ph: 979-845-7801
Texas A&M University                      fax: 979-845-2590
Author
25 Sep 2006 5:06 PM
Chuck
Show quote Hide quote
On Mon, 25 Sep 2006 11:11:05 -0500, "Chris Barnes" <chris-bar***@tamu.edu>
wrote:

>Chuck <n***@example.net> wrote:
>> Check the restrictanonymous setting.
>> <http://nitecruzr.blogspot.com/2005/07/restrictanonymous-and-your-server.html>
>> http://nitecruzr.blogspot.com/2005/07/restrictanonymous-and-your-server.html
>>
>> And make sure that Guest is properly activated for network access.
>> <http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate>
>> http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Activate
>
>
>Thank you very much.  The first link was exactly what I needed.

And restrictanonymous strikes again.  Thanks for the feedback.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.