And this is in fact another way of saying that you too have the Guest account enabled (though not explicitly) since that is an implicit side effect of having simple file sharing.
And since I will not allow simple file sharing on my LAN I have enabled the Guest account.Quote:
So when you disable Simple File Sharing, you are actually disabling the Guest account, so you would need to either re-enable the Guest account or Simple file Sharing for a Guest login.
For my Win2K server I do. But that is not really the cause of my choices.Quote:
Unless you use remote administration to manage your PC,
I think you have misunderstood the security aspect here. Simple file sharing never increases security, but always decreases it, as it gives automatic read access to all shares regardless of the identity of the computer/account making the request. If you have a wireless LAN it might not even be a local computer at all, but some passerby outside with a laptop...Quote:
i would also recommend keeping Simple File Sharing enabled, because while it is enabled, ALL remote access to your PC MUST use the Guest account's permissions, which is read only and helps prevent any remote users from changing anything on your PC.
While it is true that this default permission is restricted to read access, this is not to be seen as any improvement over a real private network with secure login.
Sure, a network without simple file sharing can also allow write access over LAN, but only for shares for which such permission has been explicitly set, and only for users and user groups for which such permissions have been explicitly granted. For everyone else with access it remains limited to read_only, and for outsiders there will be no access at all. (Except for any shares that permit Guest access, like the PS2SMB stuff.)
Best regards: dlanor

