Re: Remote Shutdown

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I think that was it.

Thank you

D



"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@xxxxxxxxx> wrote in message
news:esAQCUvXFHA.2420@xxxxxxxxxxxxxxxxxxxxxxx
> -Draino- wrote:
>
>> I am trying to do a remote shutdown on some of my machines in my network.
>> The 2 XP Pro machines won't do a remote shutdown unless I have the guest
>> account enabled on those machines.
>>
>> I am doing the remote shutdown from a XP Pro machine. I have no problem
>> shutting down the 2 Win2k machines without the guest account enabled.
>>
>> Any idea why I have to have the guest account enabled on the 2 XP Pro
>> machines?
> Hi,
>
> Most likely a ForceGuest issue.
>
> Note that for Windows XP in a workgroup setting, default all connections
> coming from "the network" will be authenticated as the Guest User.
>
> Note that for WinXP Home you cannot disable the ForceGuest behavior
> (only in WinXP Pro).
>
> A direct registry edit is possible to change this setting:
>
> HOWTO: Validate User Credentials on Microsoft Operating Systems
>
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;180548
>
> <quote>
> On Windows XP, the ForceGuest registry value is set to 1 by default in
> the following registry key:
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
>
> On a Windows XP computer that is a member of a workgroup:
>
> If ForceGuest is enabled (set to 1), SSPI will always try to log on
> using the Guest account.
>
> If the Guest account is enabled, an SSPI logon will succeed as Guest
> for any user credentials.
>
> If the Guest account is disabled, an SSPI logon will fail even for
> valid credentials.
>
> If ForceGuest is disabled (set to 0), SSPI will log on as the specified
> user.
>
> </quote>
>
>
> Note that "Folder Options/Use simple file sharing" and GPEDIT.MSC and
> the "Network access: Sharing and security model for local accounts"
> policy setting is just another way of changing the ForceGuest value.
>
> More about ForceGuest here as well:
>
> How to Set Security in Windows XP Professional That Is Installed
> in a Workgroup
> http://support.microsoft.com/default.aspx?scid=kb;en-us;290403
>
> SMTP Authentication Configuration on Windows XP Professional Edition
> http://support.microsoft.com/default.aspx?scid=kb;en-us;304707
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx


.

Relevant Pages

  • Re: File sharing
    ... >> The windows firewall is on File and print sharing is on. ... > It could be a ForceGuest issue... ... Validate User Credentials on Microsoft Operating Systems ... > If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Microsoft Baseline Security Analyzer, multiple computer scanni
    ... Also, for Windows XP computers, you need to handle the ForceGuest ... Note that for Windows XP in a workgroup setting, ... If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: WMI Query during sysprep mini-setup (XP SP1)
    ... > meaning all remote connections connect under the guest account, ... Windows XP in a workgroup setting all connections coming from ... Note that for WinXP Home you cannot disable the ForceGuest behavior ...
    (microsoft.public.windowsxp.wmi)
  • Re: File sharing
    ... > The xp account is an administrator account. ... It could be a ForceGuest issue... ... Note that for Windows XP in a workgroup setting, ... If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Networking between Win XP Sp2 pro with Win2K Pro
    ... > Win2k Pro OS system. ... Most likely a ForceGuest issue. ... Note that for Windows XP in a workgroup setting, ... If the Guest account is enabled, an SSPI logon will succeed as Guest ...
    (microsoft.public.windowsxp.security_admin)