active-directorypermissionswindowswindows-server-2008-r2
The business is in the middle of migrating from Windows workgroup to Windows domain.
We have a network share on the domain, that we want accessible to the workstations which are still in the workgroup. (We will be migrating the workstations as time allows.)
Domain administrator accounts can access the share from the workgroup machines but standard user accounts cannot.
To do what you want you'll have to enable the "Guest" account on the computer hosting the files and then grant the "Everyone" group whatever access you want.
"Guest" is a user account, but its enabled / disabled status is interpreted by the operating system as a boolean "Allow unauthenticated users to connect?" Permissions still control the access to files, but you open things up a LOT by enabling Guest.
Don't do this on a domain controller computer, BTW, because you'll be Guest on all DCs...
Best Answer
In the share permissions and NTFS permissions, you want to give access to an Active Directory security group or groups. I normally give Everyone full access in the share permissions and manage my access via NTFS permissions.
You add users to that group that you want to give access to. Even if their machines are not yet joined to the domain.
The users in the workgroup can map that share with their AD credentials, even if their workstation isn't joined to the domain yet by going though the Map Drive wizard in Explorer or by using the command-line net use command with the /user switch.