desktop application access server folder without impersonate

asked 2022-06-09T03:12:22.677+00:00
kenny 1 Reputation point

I am currently having a desktop application which access the file on the server by using impersonate so that we don't need to give the end users rights to access the server resources.

As new requirement kick in and no more impersonation allowed on the server. May i know what is the best way or alternative for this windows application to access server resources without giving the folder rights to the user id

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
2,565 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
8,143 questions
No comments
{count} votes

2 answers

Sort by: Most helpful
  1. answered 2022-06-09T06:56:36.723+00:00
    risolis 5,921 Reputation points

    Hello @kenny

    Thank you for your post.

    I would like to provide a suggestion for this scenario which will be UNC path and below you will find the link for the same.

    https://learn.microsoft.com/en-us/dotnet/standard/io/file-path-formats

    Looking forward to your feedback,

    Best Regards,

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    No comments

  2. answered 2022-06-10T07:52:45.25+00:00
    Limitless Technology 37,291 Reputation points

    Hi kenny-0433,

    To do what you want you'll have to enable the "Guest" account on the computer hosting the files and then grant the "Everyone" group whatever access you want.

    "Guest" is a user account, but its enabled / disabled status is interpreted by the operating system as a boolean "Allow unauthenticated users to connect?" Permissions still control the access to files, but you open things up a LOT by enabling Guest.

    Don't do this on a domain controller computer, BTW, because you'll be Guest on all DCs...

    I hope this answers your question.

    Thanks.

    -----------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    No comments