NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
radon85
Dec 14, 2019Guide
Readyshare not working Windows 10.
I'm tired of waiting on the SMB1 fix. Am I missing something or wouldn't it be easier if Netgear simply added support for an additional user (other than guest and admin)?
IrvSp
Dec 16, 2019Master
radon85 wrote:I'm tired of waiting on the SMB1 fix. Am I missing something or wouldn't it be easier if Netgear simply added support for an additional user (other than guest and admin)?
There is NO SMB1 fix, not from NG, and MS has already made its fix as far as security goes. SMB 1 is old, uses NETBIOS and Computer Browser. MS has depricated SMB 1 and along with that the Computer Browser. NG aleardy has many routers (you didn't specify what router you have by the way) running SMB 2 and 3. What NG has to do is enable and use the WSD protocol for sharing, and they have NO PLANS to do that.
Not even sure what you are asking for? Additional User? I suspect you mean another set of SSID's? Why would that be 'simple' and provide any protection? How will that solve anything or have anything to do with SMB 1 needed for sharing?
radon85
Dec 16, 2019Guide
My understanding is that insecure guest logins have been disabled; see link. As an admin, I have no issue accessing the share. However, my users are unable to access the share as a guest. Since "admin"/password works but "guest" (with no password) appear to be an issue, I'm simply suggesting support for an alternate user account with a password; e.g. "user"/password. This "user " account would simply provide access to the share as "guest" did in the past; it would not allow allow the user to log into the router.
- IrvSpDec 16, 2019Master
radon85 wrote:My understanding is that insecure guest logins have been disabled; see link. As an admin, I have no issue accessing the share. However, my users are unable to access the share as a guest. Since "admin"/password works but "guest" (with no password) appear to be an issue, I'm simply suggesting support for an alternate user account with a password; e.g. "user"/password. This "user " account would simply provide access to the share as "guest" did in the past; it would not allow allow the user to log into the router.
Nice link, you might notice I was active in there too (2018-02-01 10:04 AM on....).
You are confusing a few things... Guest Network on the router and Guest access to a share under W10 PC attached to a LAN.
My R8000 is not active right now, but the GUEST SSID has the capability to be isolated from YOUR LAN. There is a ALLOW setting if I'm remembering correctly you have to check. In that case, Guests will have COMPLETE access to everything the NORMAL (your word is ADMIN it seems) can access, all SHARES on ANY device as well as the USB drive on the router.
Of course, this might not be what you want. However, the PC's that have shares can be set to only allow share access via UID and PC.
- IrvSpDec 16, 2019Master
radon85 wrote:My understanding is that insecure guest logins have been disabled; see link. As an admin, I have no issue accessing the share. However, my users are unable to access the share as a guest. Since "admin"/password works but "guest" (with no password) appear to be an issue, I'm simply suggesting support for an alternate user account with a password; e.g. "user"/password. This "user " account would simply provide access to the share as "guest" did in the past; it would not allow allow the user to log into the router.
Oh, by the way, look at this MS link, https://support.microsoft.com/en-us/help/4046019/guest-access-in-smb2-disabled-by-default-in-windows-10-and-windows-ser and from it:
========
In Windows 10, version 1709, Windows 10, version 1903, Windows Server, version 1709, Windows Server, version 1903, and later versions of Windows, the SMB2 client no longer allows the following actions:- Guest account access to a remote server
- Fallback to the Guest account after invalid credentials are provided
SMBv2 has the following behavior in these versions of Windows:- Windows 10 Enterprise and Windows 10 Education no longer allow a user to connect to a remote share by using guest credentials by default, even if the remote server requests guest credentials.
- Windows Server 2016 Datacenter and Standard edition no longer allow a user to connect to a remote share by using guest credentials by default, even if the remote server requests guest credentials.
- Windows 10 Home and Professional editions are unchanged from their previous default behavior.
If you try to connect to devices that request credentials of a guest instead of appropriate authenticated principals, you may receive the following error message:=====================Again, the credentials are from Windows to a Windows Server, not router. Guest Credentials usually means no USERID or PASSWORD in this context, that is anyone can access the server.Probably most of us run W10 Home or Pro if using Windows (older version did not have this change), so it wouldn't be part of your problems either.- radon85Dec 16, 2019Guide
Well I'm confused by the responses, so you may be right. ;-)
I'm talking about ethernet access over the LAN to readyshare on the router; no SSID involved. When a user attempts to mount the \\readyshare\folder, Windows prompts for username/password. Entering admin/password works; entering guest with no password does not.
Several readyshare folders are set up. An ADMIN folder for admin only access; an RO folder for readonly access by "All - no password" (i.e. guests), and an RW folder for full access by guests.
This used to work for guests. Now it does not. If guest without password is the problem, then a "user" account with a password would seem to be an alternative.
When I mount the drive as "admin", I provide the admin password assigned to the router. Thus, if the router also supported a "user" account, then the users could mount the drive as "user" and provide the user password assigned to the router.
Does this make sense?
- IrvSpDec 16, 2019Master
OK, more clarity in what you want to do.
I've got my USB drive set up with TWO shares. The share for the ROOT of the drive with is P/W protected but has access to the entire drive. In that drive I have a folder on the root called SHARE and a sub-folder in it called VIDEO which contains many sub-folders of ripped DVD's, that \SHARE\VIDEO is NOT P/W protected. So I now have 2 sharenames for the USB drive, \\R8000 which is the root (192.168.1.1) and \\R8000\SHARE.
Now on my PC only is a Credentiai for the Router (192.168.1.1) that contains the UID and P/W for the router \\R8000 share. My PC has complete access to the drive, however, other PC's and devices don't as they don't know the UID and PW. Now I'm using DLNA Server on the router and therefore the \\R8000\SHARE since it has NO CREDENTIALS needed can be used by the SmartTV's to show the DVD's as can a DLNA Client on the PC's, Phones, and iPad's. I think you might have been asking how to do that (Read the Manual as well).