Thinking about the different results of shared resources in the domain environment of workgroup computer access

The first scenario: Accessing a file server in a 03 domain environment (with UNC path \\x.x.x.x) does not require entering a domain account to see the shared folder, but when you double-click the folder, the error is not accessible.

The second scenario: accessing the file server (with UNC path \\x.x.x.x) in a 08R2 domain environment prompts you to enter a domain user account and, when you enter the correct account, you can view the folder that corresponds to this account's permissions.

The above two cases are not caused by the 03 domain and 08R2 domains, but because of the file server local Group Policy: Network access: Local account sharing and security model (Group Policy location in Computer Configuration-windows Settings-security settings-Local Policies-security options) are different. The first case occurs when this item is set to Classic mode (the Guest account must be enabled!) when this key is set to Guest mode only the second case occurs.

Thinking: For a growing number of BYOD devices in the company, and each employee has a domain account, the second situation can lead to internal data leaks, and in the first case, employees cannot access the company's shared data with their own notebooks. Is it more secure to enable the Guest account?

Thinking about the different results of shared resources in the domain environment of workgroup computer access