desktop application access server folder without impersonate

Question

I am currently having a desktop application which access the file on the server by using impersonate so that we don't need to give the end users rights to access the server resources.

As new requirement kick in and no more impersonation allowed on the server. May i know what is the best way or alternative for this windows application to access server resources without giving the folder rights to the user id

Answer 1

Hello @kenny

Thank you for your post.

I would like to provide a suggestion for this scenario which will be UNC path and below you will find the link for the same.

https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats

Looking forward to your feedback,

Best Regards,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi kenny-0433,

To do what you want you'll have to enable the "Guest" account on the computer hosting the files and then grant the "Everyone" group whatever access you want.

"Guest" is a user account, but its enabled / disabled status is interpreted by the operating system as a boolean "Allow unauthenticated users to connect?" Permissions still control the access to files, but you open things up a LOT by enabling Guest.

Don't do this on a domain controller computer, BTW, because you'll be Guest on all DCs...

I hope this answers your question.

Thanks.

-----------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--