Domain file share with anonymous access

Question

I'm trying to make an anonymous share on a domain joined server (NOT the DC). But I need the share on that domain to allow anonymous access. This is a home / lab environment and it will NOT be exposed to the internet.

I've tried the following:
https://social.msdn.microsoft.com/Forums/en-US/4b5e4b6c-da4e-440a-8286-4f2315684a35/share-permissions?forum=winservergen
but had no luck.

Anyone got any ideas?

Answer 1

Hi,
I did a test in my lab, after configured the following settings, the folder can be accessed by the anonymous access.

1,On the shared folder, configure the share permission and NTFS permission with everyone has the read permission.

2,Also make sure that network folder sharing is enabled in Windows ( Settings -> Network & Internet -> Ethernet -> Change advanced sharing options). In All Networks section, select the options Turn on sharing so anyone with network access can read and write files in the Public folders and Turn off password protected sharing if you trust all devices in your network

3,Group policy,configure the following policies:
Open the Local Group Policy Editor (gpedit.msc) on a server/computer, which you want to enable anonymous access to.

Go to the following GPO section: Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. Configure the following policies:

Accounts: Guest Account Status: Enabled
Network access: Let Everyone permissions apply to anonymous users: Enabled
Network access: Do not allow anonymous enumeration of SAM accounts and shares: Disabled
Network access: Shares that can be accessed anonymous. Specify the shared folder names you want to enable anonymous access to.

4,Computer Configuration -> Windows Settings -> Security Settings> Local Policies -> User Rights Assignment.
Deny log on locally policy: Make sure that the Guest account is specified in the Deny log on locally policy .
Deny access to this computer from the network policy should not have Guest as the value.

Best Regards,

Answer 2

Thank you FanFan-MSFT for the very detailed answer.

But I'm still getting asked for authentication creditials.

Answer 3

The policies were applied (after shut down and turn on, went back in to check and they were still there).
Tried to connect from a non-domain attached computer while logged in with a local userid.

Answer 4

I tried this on a non-domain attached server (just in workgroup) and it worked flawlessly.

Answer 5

Did you ever get this working?

Have the same issue with a domain-joined server 2022 and non-domain-joined clients.