Win 2003 sharing settings

Turn off LAN sharing
1, do not allow anonymous enumeration of SAM accounts and shares (system default is allowed).
Group Policy - Computer Configuration - Windows Settings - Security Settings - Local Security Policy - Security Options - Network Access: Do not allow anonymous enumeration of SAM accounts and shares.
is set to enabled
Description: Use the ipc$ channel to establish an empty connection and anonymously enumerate how many accounts the machine has. Obviously there are certain security risks.
It is recommended that no empty connection is allowed. This will improve the security of single-machine dial-up Internet. The negative effect is that the LAN cannot access each other.
2, the local account password is blank. , other machines are not allowed to access the machine (the system is not allowed by default).
Group Policy-Computer Configuration-Security Settings-Local Security Policy-Security Options-Account: Local account with blank password only allows console login .
Set as enabled
Description: Many people's accounts are not password-added. In this way, when other computers on the LAN access the machine, an error message will pop up:
Login failed: User account limit .......... This is caused by a security policy of the XP system, preventing others from entering your computer when you are emptied of your password.
3, Windows Firewall: File and printer sharing is not allowed (system not allowed by default)
Control Panel-Windows Firewall - Exceptions - File and Printer Sharing.
Set to not select
Description: All policies are set, LAN is still not accessible, Tip: You do not have permission to use network resources, find
not network Path! In fact, XP has a level, which is the firewall, which must be allowed by the firewall.
4, Guest account: disabled.
Control Panel - User Account - Guest Guest Account
is set to disabled < Br>

******************************************
Open LAN share (access to the machine without authentication to enter)
1, allow SAM account and share anonymous enumeration (the system is allowed by default).
Group Policy - Computer Configuration - Windows Settings - Security Settings - Local Security Policy - Security Options - Network Access: Do not allow anonymous enumeration of SAM accounts and shares.
is set to disabled
2, local account blank password, allow it Machine access to the machine (system default is not allowed).
Group Policy-Computer Configuration-Security Settings-Local Security Policy-Security Options-Account: Local account with blank password only allows console login.
Set to disabled
3, Windows Firewall: Allow file and printer sharing (system not allowed by default)
Control Panel - Windows Firewall - Exceptions - File and Printer Sharing.
set to select
4, Guest account: Enabled.
Control Panel-User Account-Guest Guest Account
Set to Enable
5, Sharing Mode: Local User Guest Authentication.
Group Policy-Computer Configuration-Security Settings- Local Security Policy - Local Security Policy - Security Options - Network Access: Local Account Sharing and Security Mode
Set to Guest Only - Local User Authentication Verification
Description: When other LAN local devices access the machine, A dialog box will pop up and you can go directly.

********************************** ********
Open LAN share (access to this machine requires a username and password)
1, allow SAM account and share Name enumeration (system default is allowed).
Group Policy-Computer Configuration-Windows Settings-Security Settings-Local Security Policy-Security Options-Network Access: Do not allow anonymous enumeration of SAM accounts and shares.
Set to disabled
2, the local account blank password, allow other machines to access the machine (the system is not allowed by default).
Group Policy - Computer Configuration - Security Settings - Local Security Policy - Security Options - Account: A local account with a blank password is only allowed for console login.
is set to disabled
3, Windows Firewall: Allow file and printer sharing (system not allowed by default)
Control Panel - Windows Firewall - Exception - file and printer sharing.
set to select