30.4 Configuring Windows CIFS share

30.4.1 Setting up a null session share on an NT-based device

  1. From the Start menu, Run the program regedt32.

  2. In the Registry Editor window, search the HKEY_LOCAL_MACHINE on Local Machine window.

  3. Navigate to HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/lanmanserver/parameters.

  4. Open the multi string value NullSessionShares and add the share name from the selected folder. Enter the value on a new line in the registry value.

  5. Close the Registry Editor window.

  6. Under Administrative Tools, select Services.

  7. Right-click the Server service and select Restart to restart the service.

30.4.2 Setting up a null session share on a Windows 2003 Server

If the system where you are creating the null session share is running Windows 2003 Server, you must enable the Group Policy "Network access: Let Everyone permissions apply to anonymous users". You must perform the steps mentioned in Section 30.4.1, Setting up a null session share on an NT-based device, then perform the following steps:

  1. Click the Start menu.

  2. Click Run.

  3. Specify gpedit.msc.

  4. Go to the following location: Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options.

  5. Double-click Network access: Let Everyone permissions apply to anonymous users.

  6. Select Enable and press Enter.

30.4.3 Setting up a null session share on Windows 2008 Server

If the system where you are creating the null session share is running Windows 2008 Server, you must enable the Group Policy "Network access: Shares that can be accessed anonymously". You must perform the steps mentioned in Section 30.4.1, Setting up a null session share on an NT-based device, and Section 30.4.2, Setting up a null session share on a Windows 2003 Server, then perform the following steps:

  1. Click the Start menu.

  2. Click Run.

  3. Specify gpedit.msc.

  4. Go to the following location: Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options.

  5. Double-click Network access: Shares that can be accessed anonymously.

  6. Select Enable and press Enter.

To test your setup, use the net use command to connect to your resource using an anonymous login and null password. From a command prompt, execute the following:

net use \\servername\sharename "" /user:""

(Where \\servername\sharename is replaced by the UNC of the null share.)If you already have a connection to the server, you must clear the connection to the server prior to executing the above command, or it will instead attempt to map the device using the previously successful connection parameters.

The response The command completed successfully indicates that the device mapped successfully, while errors such as System error 5 has occurred. Access is denied indicates a failure and you must verify your setup.If you have successfully mapped the device, then copy files to or from the resource \\servername\sharename to ensure that you have the required access.