Enabling Guest Access in Windows

1 Star2 Stars3 Stars4 Stars5 Stars
  • Product:
  • Version:
  • Document Type:
  • Revised:
  • Reviewed:


This article explains the configuration of ExtremeZ-IP to support guest access when running under Windows XP and later operating systems, including Windows 2003, Windows Vista, and Windows Server 2008.


Starting with Windows XP, the Anonymous Logon group is no longer a member of the Everyone group by default. This change was made by Microsoft because if some system administrators did not realize that anonymous users were members of the Everyone group they might have inadvertently granted them access to resources only intended for authenticated users.

In order to enable guest access, ExtremeZ-IP requires that the Anonymous Logon group be a member of the Everyone group. For operating systems that do not support this behavior by default, a system-wide setting needs to be changed.

To change this setting, launch the Local Security Settings (sometimes called Local Security Policies) administrative tool. Navigate to Local Policies -> Security Options and set the “Network access: Let Everyone permissions apply to anonymous users” setting to “Enabled”.
Note: You must restart the ExtremeZ-IP service to have this change take effect.

Related Article: