desktop application access server folder without impersonate

kenny 1 Reputation point
2022-06-09T03:12:22.677+00:00

I am currently having a desktop application which access the file on the server by using impersonate so that we don't need to give the end users rights to access the server resources.

As new requirement kick in and no more impersonation allowed on the server. May i know what is the best way or alternative for this windows application to access server resources without giving the folder rights to the user id

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
5,446 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,077 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. risolis 8,701 Reputation points
    2022-06-09T06:56:36.723+00:00

    Hello @kenny

    Thank you for your post.

    I would like to provide a suggestion for this scenario which will be UNC path and below you will find the link for the same.

    https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats

    Looking forward to your feedback,

    Best Regards,

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

  2. Limitless Technology 39,336 Reputation points
    2022-06-10T07:52:45.25+00:00

    Hi kenny-0433,

    To do what you want you'll have to enable the "Guest" account on the computer hosting the files and then grant the "Everyone" group whatever access you want.

    "Guest" is a user account, but its enabled / disabled status is interpreted by the operating system as a boolean "Allow unauthenticated users to connect?" Permissions still control the access to files, but you open things up a LOT by enabling Guest.

    Don't do this on a domain controller computer, BTW, because you'll be Guest on all DCs...

    I hope this answers your question.

    Thanks.

    -----------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments