Skip to main content

Windows File shares

Why

Account-shared, password protected fiel share is both more secure and far easier to enable than an anonymous share (on recent Windows anonymous file shares are by design difficult to enable)

Client:

net use d: \ip\share /user:testuser

password

Remove:

net use * /delete

(or letter name instead of *)

Server

Server side:

windows: Share AND Advanced Share, FULL Control everyone (WTF) and also create dedicate user account & give NTFS permissions to that account.

Samba: equivalent:

[global] server min protocol = SMB2_10 client min protocol = SMB2 client max protocol = SMB3 ntlm auth = yes

[sharename] comment = files path = /thepath browseable = yes read only = yes guest ok = no

smbpasswd -a username net use s: \a\b /user:username

alt: [global]

min protocol = SMB2 max protocol = SMB3

client min protocol = SMB2 client max protocol = SMB3

client ipc min protocol = SMB2 client ipc max protocol = SMB3

server min protocol = SMB2 server max protocol = SMB3