Windows – Server 2012 smb share without login, and share edit permissions

server-message-blocksharewindowswindows-server-2012-r2

So i just installed server 2012 on a proliant microserver.
So far i've managed to set everything up, this server isn't running any advanced setup. Hell i would probably be fine just running win8 on it.

But nevertheless, i don't have a lot of experience with windows server, so this is a decent opportunity for that.

My problem is smb shares. I can create a share. But i would constantly be asked to login to the share. By adding anon, guest and everyone with full permissions i've gotten around the login part. Or so i think.

I'm sharing an entire drive. I can get onto the drive and see the 1 folder i've created on it, but that's all i can do, i can't create other folders nor enter the already ekscisting one. I don't know if this is related to the login part.

Suggestions?

Best Answer

Windows Server has share-level permissions and file-level permissions. It sounds like you have managed to change the share-level permissions, but not the file-level permissions.

If you want to give write access to non-authenticated users, you have to add file-level permissions to "Everyone" in the "Security" tab on the folder / drive. (Use "Edit" or "Advanced").

I would not recommend this approach. Anyone connecting to your network would have write access. I would suggest connecting to the shared folder / drive with username and password from the client, and saving the credentials. (Use "Map network drive" and check for "Connect using different credentials", and then check the "Remember my credentials" when adding the username / password).

Related Solutions

Windows – Mount Remote CIFS/SMB Share as Folder

Just to map a network share directory you would use this command:

net use \\Server\ShareName\Directory

This mapping would:

not be persistent
would have to be established and authenticated at user login
you would access the share using the UNC path, and not a local drive letter

If you want to access the network share through a location on your local C: drive, you'll want to set up a symbolic link:

mklink /d  C:\Folder\ShareName \\Server\ShareName\Directory

Now when you navigate to C:\Folder\Share you'll see the contents of \\\Server\Sharename\Directory. You'll still need to provide authentication for the resource with something like net use (or just be logged into a domain account on a domain system that has access) otherwise the link will probably error out angrily.

Samba – Anonymous Samba share across subnets (without WINS?)

Okay, I ended up posting to the Samba users mailing list and someone suggested that I try the advice on this blog post:

http://blog.realcomputerguy.com/2010/12/samba-and-guest-shares-with-security.html

So I added the following lines to my config:

[global]
  ...
  security = user
  Map to guest = Bad User
  username map = /etc/samba/smbusers
  ...

[theshare]
  guest ok = yes

And created /etc/samba/smbusers with the following contents:

nobody = guest

Restarted smbd, and voila, she works!

Best Answer

Related Solutions

Windows – Mount Remote CIFS/SMB Share as Folder

Samba – Anonymous Samba share across subnets (without WINS?)

Related Topic