Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a directory shared on my computer, which is part of the domain. Is it possible to set up the share so that a user logged on to a different machine which is not part of the domain can access my share? From the machine not on the domain, I can browse to the share, but it asks for credentials, and I just want to allow anonymous access.

share|improve this question
Is the guest account activated on the machine? –  ThorstenS Aug 7 '09 at 20:34
I hope that it isn't? –  RateControl Aug 7 '09 at 20:50

6 Answers 6

up vote 13 down vote accepted

To do what you want you'll have to enable the "Guest" account on the computer hosting the files and then grant the "Everyone" group whatever access you want.

"Guest" is a user account, but its enabled / disabled status is interpreted by the operating system as a boolean "Allow unauthenticated users to connect?" Permissions still control the access to files, but you open things up a LOT by enabling Guest.

Don't do this on a domain controller computer, BTW, because you'll be Guest on all DCs...

share|improve this answer
We ended up using an XP machine off the domain, with guest enabled. –  Jeremy Oct 21 '09 at 22:38

Enabling the Guest account is not recommended. Baz and djangofan are correct; you have to give the anonymous user permission to the share and the folder. (Security permissions in the sharing and folder tab, assuming you don't have a Home version of Windows.)

An interesting gotcha: Giving 'Everyone' access doesn't work, even though you'd think it would. In the permissions dialog in the sharing tab, you specifically have to include the anonymous user. On Windows 7, that's the local ANONYMOUS LOGON user.

share|improve this answer

Do you really want to give unauthenticated access to files? If it's a small group of users, you could create local accounts for them on the machine, create a group, and give that group access to only that one folder. If it's a web server in a DMZ, maybe setting up a web front end would be better so you can better security than "Everyone has access to do whatever to these files".

share|improve this answer

I solved this by mapping a network drive to the domain share then connect with different credentials using a local account. Didn't have to enable the guest account or allow anonymous access.

share|improve this answer

I would try to toggle the "simple file sharing" setting in the Windows Explorer settings and see how that changes things. Then , on top of that, edit the permissions for your share to allow non-domain, non-authenticated users.

share|improve this answer
How do I edit permissions to allow non-domain, non-authenticated users? I haven't seen these options in the folder permissions dialog before. Also, this is on a windows 2003 server, Is there a simple file sharing option? –  Jeremy Aug 7 '09 at 21:59
Ok, on that folder that you are sharing you need to add a group called "EVERYONE" to the share and file permissions. Grant them the permissions that you require (going to guess read/write/modify). –  djangofan Aug 10 '09 at 14:31

In the security tab and share tab give anonymous the desired read/write access. Then anyone should be able to access the share.

On a side note that was nice and easy to post a comment for the first time. No complicated reg. process. cheers to the authors of this website.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.