How to create anonymous share on Windows 10?

Easy method:

1. Network and Sharing Center > Advanced sharing settings > All Networks > Turn off password protected sharing (this enables the guest account)

2. Create share folder > right click > properties > sharing > advanced sharing > Share this folder > Permissions > check 'full control' > OK > security tab > add "Everyone", check "full control" > OK > OK

No need to enable Public folder sharing, mess with security permissions (other than 'Everyone'), and can leave Network access: Sharing and security model for local accounts set to Classic

I don't recommend using the 'Give access to' or 'Share...' "wizard" as it will sometimes share parent folders (e.g. if your shared folder is on your desktop, it will share the "Users" folder) or fail to apply necessary "Everyone" security permissions (e.g. if your shared folder is in C:\)

These steps seem to have worked:

• enable guest user
• run gpedit.msc, go to Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options, change the value of Network access: Sharing and security model for local accounts to guest only

Regarding the 2nd point, I read the following Microsoft document:

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-sharing-and-security-model-for-local-accounts

My conclusion after reading it is that, if you are running a network server you should use "classic", otherwise it is ok to use guest only as you might not want access control at all, like me.

This is still very stupid though, without making the change anonymous users cannot access the shares why the heck does the properties pane say People without a user account and password for this computer can access folders shared with everyone.

Here is an alternative method that I use to accomplish this in Windows 10 Pro. This method involves enabling the Public folder sharing functionality built into Windows, creating a new Shared folder and setting the Sharing and NTFS permissions identical to the Public folder under the Users directory. Then disabling the Public share. This method does not modify any local security policies or registry settings (that I have seen posted all over the Internet)

1. Open “Network and Sharing Center” and click on the “Advanced sharing settings” link.
2. Expand "All Networks".
3. Check “Turn on sharing so anyone with network access can read and write files in the Public folders”
4. Click “Turn off password protected sharing”.
5. Create the “Shared” folder on the drive of your choice on whatever drive you choose.
6. Enable the share by clicking the “Advanced Sharing…” button.
7. Set the Share permission to “Everyone”, “Full Control”.
8. Set the Security [NTFS] permissions the same as the “Public” folder under the C:\Users directory.
9. For “Interactive”, “Service” and “Batch” set the 2 special permissions to match the permissions in Advanced Security Settings, Show Advanced Permissions.
10. Optional: Turn off sharing on the “Users” directory that wasenabled when the Public Folder sharing was enabled.
11. Optional: If multiple subnets/VLANs need to access the fileshare, go into the Windows Defender Firewall, Advanced FirewallSettings, click on “Inbound Rules” and filter by the File andPrinter sharing group and profile type. Under the Scope tab, modifyeach Inbound firewall rule and change "localsubnet" under "RemoteIP Address" to include the additional subnets that need access tothe share.
12. Test access to the newly created “Shared” folder.
13. Check in “Computer Management” for the Session status. It showsas "Guest" is the account used to authenticate.
14. Repeat the process for multiple shared folders with anonymous/guest access.

Advanced Permissions

Advanced Permissions

Advanced Permissions