WinSecWiki > Security Settings > Local Policies > Security Options > Network Access > Let Everyone permissions apply to anonymous users

Network access: Let Everyone permissions apply to anonymous users

Windows allows anonymous connections as well as logons as Guest (if Guest account enabled) but by default such sessions are extremely limited. Normally anonymous sessions are limited to enumerating available user accounts and shared printers and folders. 

However you can allow anonymous logons and logons as Guest access to folders and other resources by granting permissions on such resources to the ANONYMOUS special subject or you can use this setting to declare that any permissions assigned to Everyone also apply to anonymous logons and logons as Guest. Normally anonymous users are not considered members of the Everyone special group. But this setting, if enabled, extends Everyone to include anonymous logons and logons as Guest. 

Bottom line

Do not enable this setting.

Back to top

 

Additional Resources