Thursday, July 17, 2008

Changing Network Authentication Mode

When I had completed installing the network at home, I tried to access the hidden folders on my bro's computer. I was presented with a prompt asking me to authenticate as a guest. The user name field was hard coded with "Guest" and was unchangable.

(For the context of this article I will refer to the machine sharing the folders as "remote computer". Also, this article has been written for Windows XP.)

Such a user prompt essentially stops you from accessing the hidden shared folders on the remote computer even if you know the login information. This is due to the reason that most computers do not have the guest account enabled, and the prompt forces you to authenticate as a guest. Of course all authentication attempts will fail if the guest account is disabled on the remote computer.

To change this authentication mode just follow these steps (on the remote computer).
  1. Go to Start Menu > Settings > Control Panel > Administrative Tools > Local Security Policy.
  2. A new window for Local Security Policy will open. There on the left pane, expand "Local Policies".
  3. Inside Local Policies (still on the left pane), click on "Security Options".
  4. On the right pane, find an entry named "Network Access: Sharing and security model for local accounts" and double click it.
  5. In the dialog window that opens, select "Classic - local users authenticate as themselves" from the combo box.
  6. Click on OK.
There you go. Now when you try to access the remote computer, you are presented with a prompt where you can enter both user name and password. Once you provide the correct login information, you will be able to access the hidden shared folders on the remote computer.

7 comments:

Anonymous said...

Dear Taurus,

I think i have a better solution to that. Instead of changing or moving the remote machine. do it at ur machine.

1- Right Click on "My Computer"
2- Click on "Map Network Drive.."
3- connect using "different username"
4- username = remotemachine\administrator

5- now it is maped in ur my computer as drive name u specified.

this way is more secure, as only you can access the remote computer's hidden shares not everyone :).

Iqbal

Taurus said...

Dear Iqbal Sajid,

Thanks for the comment.

I tried the method you prescribed. Your solution does not work when the authentication mode is set to "Guests only - local users authenticate as Guests".

You may need to check the authentication mode on the machine you are mapping your drive to, its authentication mode might have been already changed.

Therefore, to map a drive successfully for hidden shares, it is neccessary to change the authentication mode as described in my article.

Taurus said...

Dear folks,

Changing the authentication mode does compromise on security a little, but it not true that everyone will be able to access the hidden shares on the remote machine. As I pointed out in my article, only the people who have the correct login information (that too of an account with administrative privilages) will be able to access these hidden shares. So, keeping a strong password will minimize chances of unauthorized access.

Anonymous said...

Convert MP3 to AMR for your mobile.


http://cd-bills.blogspot.com/2008/07/converte-mp3-files-to-amr-using-mobile.html

Anonymous said...

Visit some older post on my blog.
you'll find them useful for you or somone else.

Please note that all the contant i've uploaded is under GPL. so u can copy and paste what you want.

Accendently deleted your files "NO Problem"

very useful + its Freeware :)


http://cd-bills.blogspot.com/2007/12/recover-deleted-data-from-usb-flash.html

http://cd-bills.blogspot.com

Enjoy Undeleting ..

C U..

Dear Taurus,
can u tell me how to make the site links in comments?

Taurus said...

Thanks for the comment. I will visit your blog to see the post related to undelete. Also maybe I'll write an article about it ;)

Anyway... you can use the "<"a">" tag (without the quotes) for making a link in your comments. Refer to the 2nd example on the page: HTML Help for clarification.

Iqbal Sajid said...

Thanks Taurus,

Recover Data from exedently delted USB

CD-Bills.blogspot.com

I think these should work