1. Enable Guest account
In many cases, for the security of the native system, the Guest account is disabled so that the shared resources of the machine cannot be accessed, so the Guest account must be enabled.
The author takes Windows XP system as an example to introduce it. On the shared resource provisioning end, after entering "Control Panel → Management Tools", run the "Computer Management" tool, then expand "Computer Management (Local) → System Tools → Local Users and Groups → Users" in turn to find the Guest account. If a red cross appears in the Guest account, it means that the account has been deactivated. Right-click the account. In the Guest properties dialog box, remove the hook selection mark of "Account has been deactivated". After clicking "OK", the Guest account is enabled. This method is suitable for Windows 2000/XP/2003 systems.
Tip: There are great security risks when using Guest account to access shared resources. Of course, we can also create a designated account for each visitor. First, create a new account on the shared resource provider side, and then specify the access permissions of the account. Next, create a new account with the same username and password in the client that wants to access the shared resource. After logging in to the client with this account, you can access the shared resources allowed by the account normally. This method is relatively safe, but it is necessary to create an account for every user on the network, which is not suitable for larger networks.
2. Modify user access policy
Although the Guest account of this machine is enabled, users still cannot access the shared resources provided by this machine. This is because Group Policy does not allow the Guest account to access the machine from the network by default.
Click "Start → Run", enter "" in the run box, expand "Local Computer Policy → Computer Configuration → Windows Settings → Security Settings → Local Policy → User Rights Assignment" (Figure 1), find the "Reject access to this computer from the network" item in the right column, and delete the Guest account after opening it, then open the "Access this computer from the network" item, and add the Guest account in the properties window. This way, you can use the Guest account to access the shared resources of the machine from the network. This method is suitable for Windows 2000/XP/2003 systems.
3. Properly configure network firewall
Many machines have network firewalls installed, and their improper settings also cause users to be unable to access the shared resources of the machine. At this time, the NetBIOS port required for the shared resources of the machine must be opened. Taking Skynet firewall as an example, in the "Custom IP Rules" window, select the "Allow LAN machines to use my shared resources" rule, and finally click the "Save" button, so that the NetBIOS port is opened.
。
4. Set user access rights reasonably
Many machines on the network use NTFS file system, and its ACL function (access control list) can control users' access rights. If users want to access shared resources of these machines, they must give corresponding permissions. If you use a Guest account to access the CPCW shared folder of the machine, right-click the shared directory, select "Properties", switch to the "Security" tab, and then add the Guest account to the user list, and then specify the access permissions of Guest, at least "Read" and "List Folder Directory" permissions (Figure 2). If you want multiple user accounts to access the shared directory, you only need to add the Eeryone account and then assign "Read" and "List folders?"..
In many cases, for the security of the native system, the Guest account is disabled so that the shared resources of the machine cannot be accessed, so the Guest account must be enabled.
The author takes Windows XP system as an example to introduce it. On the shared resource provisioning end, after entering "Control Panel → Management Tools", run the "Computer Management" tool, then expand "Computer Management (Local) → System Tools → Local Users and Groups → Users" in turn to find the Guest account. If a red cross appears in the Guest account, it means that the account has been deactivated. Right-click the account. In the Guest properties dialog box, remove the hook selection mark of "Account has been deactivated". After clicking "OK", the Guest account is enabled. This method is suitable for Windows 2000/XP/2003 systems.
Tip: There are great security risks when using Guest account to access shared resources. Of course, we can also create a designated account for each visitor. First, create a new account on the shared resource provider side, and then specify the access permissions of the account. Next, create a new account with the same username and password in the client that wants to access the shared resource. After logging in to the client with this account, you can access the shared resources allowed by the account normally. This method is relatively safe, but it is necessary to create an account for every user on the network, which is not suitable for larger networks.
2. Modify user access policy
Although the Guest account of this machine is enabled, users still cannot access the shared resources provided by this machine. This is because Group Policy does not allow the Guest account to access the machine from the network by default.
Click "Start → Run", enter "" in the run box, expand "Local Computer Policy → Computer Configuration → Windows Settings → Security Settings → Local Policy → User Rights Assignment" (Figure 1), find the "Reject access to this computer from the network" item in the right column, and delete the Guest account after opening it, then open the "Access this computer from the network" item, and add the Guest account in the properties window. This way, you can use the Guest account to access the shared resources of the machine from the network. This method is suitable for Windows 2000/XP/2003 systems.
3. Properly configure network firewall
Many machines have network firewalls installed, and their improper settings also cause users to be unable to access the shared resources of the machine. At this time, the NetBIOS port required for the shared resources of the machine must be opened. Taking Skynet firewall as an example, in the "Custom IP Rules" window, select the "Allow LAN machines to use my shared resources" rule, and finally click the "Save" button, so that the NetBIOS port is opened.
。
4. Set user access rights reasonably
Many machines on the network use NTFS file system, and its ACL function (access control list) can control users' access rights. If users want to access shared resources of these machines, they must give corresponding permissions. If you use a Guest account to access the CPCW shared folder of the machine, right-click the shared directory, select "Properties", switch to the "Security" tab, and then add the Guest account to the user list, and then specify the access permissions of Guest, at least "Read" and "List Folder Directory" permissions (Figure 2). If you want multiple user accounts to access the shared directory, you only need to add the Eeryone account and then assign "Read" and "List folders?"..