Re: Windows XP Pro security question

NoConsequence,

Unfortunately, that's not my decision. That decision is now cast in stone.
They saw a marked improvement in performance. Doesn't matter what I say. I
would like to rebuild the systems from scratch so I know what I'm dealing
with. I'm worried about all kinds of things that may be lurking under the
covers. But again, not my decision.

***

"NoConsequence" <none@xxxxxxxx> wrote in message
news:iq8fu2d5gj51rbg3acv02p36cq9on96cv9@xxxxxxxxxx
On Thu, 1 Mar 2007 17:44:49 -0500, "*** Sutton"
<rsutton43@xxxxxxxxxxx> wrote:

I have a windows xp security question(s).

I have inherited a small business LAN of 7 computers running Win XP Pro
/SP2
& all patches and 1 Win2000 server. The lan has
virtually no access to the outside world. The lan was originally set up
as
a small domain. The medical practice had various people
maintain the lan over a period of years (most didn't know what they were
doing). At some point, the domain was taken down and a
workgroup was put in it's place. This was done to simplify admin &
increase
performance (I was told). In addition, Simple File Sharing
(SFS) is utilized. They want it that way (not my decision). All is
running
well.

An application has been designed such that a file or files are placed in a
specific directory one or more times a day. That directory is
placed the Shared Documents folder and is set up as a simple network
share.
On a given computer, another application periodically
looks in those folders on each machine. If there is a file present, it
copies it to the central station for processing. Very simple. It all
works except for 2 of the 8 computers. On 1 of the computers, the files
can
be queried but access errors occur when an attempt to
copy them is made. On the other, a Login screen appears.

I don't understand, since SFS is being used, how can there be permission
errors on these computers? I have run cacls on the shared
folders and the only entry that shows up is Everyone (F) permissions. So
I
suspect that inheritance is causing the problem but am
confused since SFS is in effect. Any ideas?

Finally, is there any way 'reset' the file system permissions back to the
way they were when the system was first installed? I figure that
someone buggered the system back when it was in a domain.

Thanks for reading this. Hope someone can point me in the right
direction.

***

FWIW,

My personal opinion is that you should move this back to a Domain
structure. It will make setting up permissions easier and user
maintennance much simpler. In my experience if you have more than
maybe 4 computers, managing file access and permissions becomes
cumbersome as you have to touch EACH machine every time a change is
made.



.