Monday, July 23, 2007

File sharing with Vista Home without passwords

After having several PC implosions, we now have two new Vista boxes at home. Both have Vista Home Premium installed. I'm used to the relative stability of XP Pro, but I figured I would give Vista a shot. For the most part it has gone very well, but I made sure that each machine was going to be able to run Vista.

My machine is a custom built box from MWave, my wife's is a Dell box. She has Intel, I have AMD, but they are both dual core machines with 2GB of RAM and decent video cards.

My wife and my kids have user accounts with out passwords. The machine has the usual security apps installed and is behind a router firewall. Their accounts are set as Standard User. I have a password protected admin account on each box. My wife has a Standard User account on each box.

We share a printer from my machine. I could print from my wife's PC, but she couldn't. She kept getting a login pass prompt and finally an error message about being able to validate credentials. It took a little while to figure out, but finally I remembered that out of the box, Vista wont let non-password protected accounts from remotely authenticating. That means that you need a password on your account to access network resources on another Vista box.

A fair amount of Googling kicked up a few suggestions to run gpedit.msc (Group Policy Editor). Most of the suggestions were of this type:

Run gpedit.msc
Go to Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options
Double click on Accounts: Limit local account use of blank passwords to console login only
Disable this option

One little problem. You only get gpedit.msc with XP Pro or Vista Business (or Ultimate). Thanks for playing the Home version of Windows, you don't get that useful little utility.

Fortunately for this setting all gpedit.msc is doing is writing to the registry. All you have to do is to edit the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

and edit the value of LimitBlankPasswordUse from 1 to 0. After you do that, you can now share printers and folders across Vista (and XP) with accounts that do not have passwords.



Updated on 8/15/2008
If you install Service Pack 1 (SP1) after making this change, you'll need to do it again as SP1 restores this setting back to the default.


4 comments:

  1. excellent post. fixed my problem. you'd think microsoft's user permissions field would be sufficient for security. they should just include a checkbox to enable this in the network sharing prefs general area.

    ReplyDelete
  2. Thanks for that insight! I have a desktop and laptop with just me as the user, but since I dont have a password it wouldn't let me share files over the network... but now it does! (Good reg hack too, my desktop has ultimate 64 bit, but laptop has Home Premium 32)

    ReplyDelete
  3. Works In Win 7 as well

    ReplyDelete
  4. thanks a lot!

    ReplyDelete

Note: Only a member of this blog may post a comment.