× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

Security how on earth does it work

Tangoman
Aspirant

Security how on earth does it work

System Netgear Readynas NV+ V2

I'm at a complete loss here.
I'm not unintelligent, but I simply cannot get the security on this box to work.

I have a single share.
I am running the following services: SMB, UPnP, FTP, HTTP, HTTPS

At present I have the admin account and a single user "ReadOnly" setup
Note - if I go into Users/Groups, I do not see the admin user listed, however I am able to connect to the box from windows using this account.

I have the Share configured as follows:

Only SMB is enabled.
In the Share Access I have ReadOnly ticked for Everyone (group), and nothing ticked for users, and ReadOnly - these inherit the Readonly property from Everyone.

Allow anonymous access is unticked.

Under protocol specific settings I have the Creation rights all set to ReadOnly
Unser Files and Folders I have Folder Owner and Group set to nobody, the Rights are all set to Readonly

Despite all of this, I can still connect to the box from windows without even presenting a username/pw and make any changes I like.

How is this resolvable?
Message 1 of 5
StephenB
Guru

Re: Security how on earth does it work

Does the windows logon/password match up with any of the NAS accounts (including admin)???

What firmware are you running?
Message 2 of 5
Tangoman
Aspirant

Re: Security how on earth does it work

The windows account on the Pc that is able to access without any pw, has no pw - the username matches an account which WAS on the device, but has been deleted.
Message 3 of 5
Tangoman
Aspirant

Re: Security how on earth does it work

Firmware 5.3.8
Message 4 of 5
StephenB
Guru

Re: Security how on earth does it work

Tangoman wrote:
The windows account on the Pc that is able to access without any pw, has no pw - the username matches an account which WAS on the device, but has been deleted.
By default, Windows will present the windows logon/password to the NAS.

This behavior can be modified in the Windows Credential's Manager (in control panel). So the next step is to look there, and see if there is an entry that specifies credentials for the NAS.
Message 5 of 5
Top Contributors
Discussion stats
  • 4 replies
  • 1173 views
  • 0 kudos
  • 2 in conversation
Announcements