MacOS – create a share on a Windows Server Domain Controller for anonymous Mac OS access

macosNetworksharingwindows

I'd like to have a share on a Windows Server Domain Controller (2012 R2) with Mac software for folks on my company to install from. Not everyone who will have access to this share will have a domain account on Windows.

On the Windows Share I gave Read permissions to Anonymous, DOMAIN\Everyone and Guests. On the Folder, I gave read permissions to the same account.

From my Mac I go to Finder and try to access the server using smb://[servername]/share and I get an access denied.

On the Mac OS "Connect to Server" dialog, if I click on Browse the server does appear on the Network list, but if I double click the server I get "Connection Failed".

Either I want to fix this, or have an easy way for folks from the office to be able to easily grab software from a main share. Least desirable is to create domain accounts for everyone.

Best Answer

Folks, be CAREFUL with domain level guest access. It opens your entire Windows network up to anyone who can access the network (Microsoft leaves this off for a reason).

If you have to share the folder on your DC then your best bet is to make an account, (call it MacGuest or whatever you want). Assign it a password that doesn't expire and can't be changed and give it to anyone who needs access to that share.

They can click on the "remember this password in my keychain" option and never have to enter it again.

Just my 2-cents...