Security Problem

[rf600]

Ok, taken over a junior school and i've found a problem that I have no idea how it was done.

 

I've taken my new laptop in, connected to the wireless and typed in the server address in explorer

thinking it'll pop up asking for my username and password so i can access the files.

 

It didn't, it just let me straight on!

 

this worries me.

is it some tick box that i need to enable so that you have to authenticate when accessing the server,

not done much with 2012 and this one was already setup

 

J

[3s-gtech]

I'd guess that the file share permissions are set to Everyone. This is bad. Authenticated Users permissions should force an auth, but really they should be properly set up with individual permissions based on the content of each share.

[MatthewL]

As above. Are all their PC's on the domain as I have come across it in a school before where they are none domain PCs and the permissions are set to everyone so they can get the data.

[Michael]

I'd also look at Domain Administrator (Group) level too, as I have come across what I can only describe as 'silly' practice giving everyone access to everything, effectively making permissions redundant.

 

You are absolutely right to be worried, as it also means (worse case scenario), the likes of malware/viruses could have full access to your network too.