windows share authentication

c00kie · 27 Jul 2006 at 15:10

I have a windows 2003 server with a share that has limited access. the group allowed to access the share have both share permissions and security permissions.

If i try accessing the share from a machine not on the domain, i get an access denied error, but i would like it to prompt me for a username/password before denying/granting me access. is that possible/?

thanks

c00kie · 27 Jul 2006 at 15:39

sja360 said:
when i want to access a share on the server 2003 i have running it just pops up with a username and password window? thats without me logging into the domain and instead logging on locally.
it could be a security setting? as for what i aint too sure

yeh thats what i would like it to do

it just refuses without giving me the chance to log in :confused:

c00kie · 27 Jul 2006 at 21:56

thank you for the suggestions
the guest acct is on - even tried disabling it no difference though.

There are loads of local user accounts on the machine already
Thanks

c00kie · 31 Jul 2006 at 12:06

does anyone have any other ideas? still unsolved

c00kie · 31 Jul 2006 at 17:53

i have a domain server running on linux, to which all clients on site are joined.
all comps use the same wins/dns assigned by DHCP.

I have VPN access which effectively puts me on their network, using their dns/wins server (pix running as dhcp server to vpn clients tho).

As a VPN client i am not on the domain.

Going on a share on the linux server pops up a password box as expected, just the win2003 doesnt

thanks

c00kie · 1 Aug 2006 at 14:07

M0KUJ1N said:
Is "security=user" and "encrypt passwords=yes" set in its smb.conf?

yep, those are both set.

c00kie · 2 Aug 2006 at 21:55

M0KUJ1N said:
Ahh, the plot thickens...so the Samba box is your PDC and is the box that deals with authentication?

I have seen this sort of behaviour from Samba in the past. Is "security=user" and "encrypt passwords=yes" set in its smb.conf?

do have any idea? still isnt playing ball

c00kie · 2 Aug 2006 at 23:23

The server is a member of the domain, yes, and it is possible on it to log in using a domain account - works fine.

All the clients on the domain have no prob authenticating with the 2003 server, will changing the NTLM level affect this.

Mapping a network drive works IF the user/pass is specified when mapping, otherwise access is denied. I realise this is a workaround but trying to explain these things to people working from home is tricky at the best of times

thanks for the help!