| Author |
Message |
glenn.woodruff@gmail.com
Guest
|
 Posted:
Thu Sep 01, 2005 12:29 am Post subject:
Simple File Sharing control in TD? |
|
|
I've been pouring TD and the NG on this but I haven't been able to find
the answer. I want to turn on and off file sharing at runtime on a
headless device using NET SHARE. I initially thought that what I
needed to do was set
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa settings to
forceguest=1 and limitblankpassworduse=0, but that's still not letting
me on; I get a dialog asking me for username and password, with Guest
set as the username. A blank password isn't accepted.
Reading the NG makes me think that I need to enable Simple File
Sharing. Well, this is a headless device so I can't exactly
right-click. How is this done in TD or in the registry? |
|
| Back to top |
|
 |
KM
Guest
|
| Posted:
Thu Sep 01, 2005 12:29 am Post subject:
Re: Simple File Sharing control in TD? |
|
|
Are you running Minlogon on Winlogon headless image?
--
Regards,
KM
| Quote: | I've been pouring TD and the NG on this but I haven't been able to find
the answer. I want to turn on and off file sharing at runtime on a
headless device using NET SHARE. I initially thought that what I
needed to do was set
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa settings to
forceguest=1 and limitblankpassworduse=0, but that's still not letting
me on; I get a dialog asking me for username and password, with Guest
set as the username. A blank password isn't accepted.
Reading the NG makes me think that I need to enable Simple File
Sharing. Well, this is a headless device so I can't exactly
right-click. How is this done in TD or in the registry? |
|
|
| Back to top |
|
|
glenn.woodruff@gmail.com
Guest
|
| Posted:
Thu Sep 01, 2005 7:57 am Post subject:
Re: Simple File Sharing control in TD? |
|
|
No, I'm running Winlogin with an automatic user login and a custom
shell. I need the full logon since I'm running IIS.
It technically isn't headless I guess, since the VGA driver exists for
now for factory and debugging, It's just locked inside the cabinet and
there's no way to get to explorer (at least in a release case). |
|
| Back to top |
|
|
KM
Guest
|
| Posted:
Thu Sep 01, 2005 8:29 am Post subject:
Re: Simple File Sharing control in TD? |
|
|
Sorry for typo in my previous reply. I meant "Minlongon *or* Winlogon".
You have answered that.
How do you connect to the share? Did you try mapping the share?
How do you remotely connect to the targe system now?
With Winlogon I wouldn't expect much problems fixing file sharing issues.
A few hints for you:
- Make sure the Guest account is created on the target system.
- Check the status of Server service on your system (net start server)
- If you build the image with SP2 database, you have to make sure that the File Sharing is permitted through SP2 firewall. Or
turn off the firewall completly.
- When you are mapping the share on another machine try to use "net use" command and specify the name of admin account existing
on the target device (through /USER:... PASSWORD command line arguments).
--
Regards,
KM
| Quote: | No, I'm running Winlogin with an automatic user login and a custom
shell. I need the full logon since I'm running IIS.
It technically isn't headless I guess, since the VGA driver exists for
now for factory and debugging, It's just locked inside the cabinet and
there's no way to get to explorer (at least in a release case). |
|
|
| Back to top |
|
|
glenn.woodruff@gmail.com
Guest
|
| Posted:
Thu Sep 01, 2005 11:51 pm Post subject:
Re: Simple File Sharing control in TD? |
|
|
How do I create the Guest account in TD? Is it just a normal account
named Guest with cmiUserGroup set to 4? |
|
| Back to top |
|
|
KM
Guest
|
| Posted:
Fri Sep 02, 2005 12:08 am Post subject:
Re: Simple File Sharing control in TD? |
|
|
Yes.
Just add "User Account" component and set cmiUserGroup to 4.
Set the cmiUseName to "Guest".
--
Regards,
KM
| Quote: | How do I create the Guest account in TD? Is it just a normal account
named Guest with cmiUserGroup set to 4? |
|
|
| Back to top |
|
|
KM
Guest
|
| Posted:
Fri Sep 02, 2005 12:29 am Post subject:
Re: Simple File Sharing control in TD? |
|
|
Also, make sure you've got "Primitive: ntshrui" component in your image configuration.
--
Regards,
KM
| Quote: | Sorry for typo in my previous reply. I meant "Minlongon *or* Winlogon".
You have answered that.
How do you connect to the share? Did you try mapping the share?
How do you remotely connect to the targe system now?
With Winlogon I wouldn't expect much problems fixing file sharing issues.
A few hints for you:
- Make sure the Guest account is created on the target system.
- Check the status of Server service on your system (net start server)
- If you build the image with SP2 database, you have to make sure that the File Sharing is permitted through SP2 firewall. Or
turn off the firewall completly.
- When you are mapping the share on another machine try to use "net use" command and specify the name of admin account existing
on the target device (through /USER:... PASSWORD command line arguments).
--
Regards,
KM
No, I'm running Winlogin with an automatic user login and a custom
shell. I need the full logon since I'm running IIS.
It technically isn't headless I guess, since the VGA driver exists for
now for factory and debugging, It's just locked inside the cabinet and
there's no way to get to explorer (at least in a release case).
|
|
|
| Back to top |
|
|
glenn.woodruff@community.
Guest
|
| Posted:
Tue Nov 08, 2005 1:28 am Post subject:
Re: Simple File Sharing control in TD? |
|
|
And finally a followup, becuause I love followups, they are the most
helpful part of newsgroups. I finally nailed this down after looking
at it off and on a few times. This could all be done via the programatically
but if you want to activate from a custom shell the
command line is the simplest way to debug (at least for me). This can all
be inverted to turn off file sharing. If you *really* want to be secure you
can add firewall settings as well.
1 - Guest is a build-in account. Don't add it to TD, enable it at runtime
when file sharing is turned on:
net user guest /active:yes
2 - Guest needs to be able to access from the network:
ntrights +r SeNetworkLogonRight -u Guest
ntrights -r SeDenyNetworkLogonRight -u Guest
Gpupdate
3 - Now I'm using NTFS, so the ACLs have to be set right:
cacls . /T /E /P "guest":R
and if writing is required:
cacls . /T /E /G "guest":W
4 - Bring down the firewall (insert well-documented registry settings
here).
"KM" wrote:
| Quote: | Also, make sure you've got "Primitive: ntshrui" component in your image configuration.
--
Regards,
KM
Sorry for typo in my previous reply. I meant "Minlongon *or* Winlogon".
You have answered that.
How do you connect to the share? Did you try mapping the share?
How do you remotely connect to the targe system now?
With Winlogon I wouldn't expect much problems fixing file sharing issues.
A few hints for you:
- Make sure the Guest account is created on the target system.
- Check the status of Server service on your system (net start server)
- If you build the image with SP2 database, you have to make sure that the File Sharing is permitted through SP2 firewall. Or
turn off the firewall completly.
- When you are mapping the share on another machine try to use "net use" command and specify the name of admin account existing
on the target device (through /USER:... PASSWORD command line arguments).
--
Regards,
KM
No, I'm running Winlogin with an automatic user login and a custom
shell. I need the full logon since I'm running IIS.
It technically isn't headless I guess, since the VGA driver exists for
now for factory and debugging, It's just locked inside the cabinet and
there's no way to get to explorer (at least in a release case).
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in