Re: ?? Net Security, User has to be prompted before connecting ??

From: Chuck (none_at_example.net)
Date: 02/16/05


Date: 16 Feb 2005 16:05:05 -0600

On Wed, 16 Feb 2005 07:19:04 -0800, OOK <OOK@discussions.microsoft.com> wrote:

>I just want to add that .. activating the guest accont didnt solve the
>situation
>
>Thanks again

On any XP Pro computer, check to see if Simple File Sharing (Control Panel -
Folder Options - View - Advanced settings) is enabled or disabled. With XP Pro,
you need to have SFS consistently set on each computer.

On XP Pro with SFS disabled, check the Local Security Policies (Control Panel -
Administrative Tools). Under Local Policies - Security Options, look at
"Network access: Sharing and security model", and ensure it's set to "Classic -
local users authenticate as themselves".

With Advanced File Sharing (SFS disabled) on computer A, and Classic
authentication, you can permission each individual user archive for that user.

To make this work, you have to setup matching accounts on A, and B or C. If you
setup Jane's accounts on computers A and B, Jane will be able to access her
archives on computer A from computer B.

If you assign identical, non-blank passwords to Jane's accounts on computers A
and B, Jane will be able to access her archives on computer A from her session
on computer B, without entering a password (except when she logs onto computer
B). If the password setup for Jane on computer A does NOT match the password on
computer B, she will have to enter the correct password whenever connecting to
computer A.

If you setup Kane's account on computer C with administrative privileges, Kane
will have administrative access on that computer. If you setup Kane's account
on computer A with administrative privileges, Kane will have administrative
access to computer A, and be able to open Jane's archive. If you setup Kane's
account on computer A with user privileges, Jane's archives will not be
accessible to Kane.

Mike, if his account is setup with administrative privileges there, since he
will be logged onto computer A directly, will have access to everybody's
archives.

Is this the right combination of abilities and restrictions?

-- 
Cheers,
Chuck 
Paranoia comes from experience - and is not necessarily a bad thing.
My        email         is          AT         DOT
   actual       address    pchuck       sonic      net.


Relevant Pages

  • Re: Setup of Information Store Service fails
    ... Exchange 2000 Setup Fails and Security Vulnerability ... When you set up Microsoft Exchange 2000 Server or Exchange 2000 Enterprise ... The account name is EUSER_EXSTOREEVENT, ... When You Install Exchange 2000 on a Member Server ...
    (microsoft.public.exchange2000.information.store)
  • Re: Adminstrator Password
    ... is a hidden administrator account called "Administrator." ... Most people do not set a password for this account and if you didn't install ... actual XP CD as opposed to a recovery CD, boot with the XP ... Once you have pressed a key, setup should begin. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Execute MDX from T-sql -Procs and Cons?
    ... from there without having to setup anything special in the web.config. ... use that account. ... On the MSAS server I would set up the same username/password, ... > Application security ...looks like the only right choice... ...
    (microsoft.public.sqlserver.olap)
  • Re: Controlled user access
    ... > If I setup an account for a vendor to come in and look at their software, ... Not if your shares are correctly setup -- or you can use ... He IS a domain users so you are granting him access to ... It is possible to take an account OUT of Domain Users ...
    (microsoft.public.windows.server.active_directory)
  • Re: [kde-linux] kmail - receiving mail with sbcglobal yahoo
    ... I have no trouble sending email through the SMTP server at sbcglobal.yahoo.com ... the other account says username/password is invalid. ... Archives: http://lists.kde.org/. ... pop.sbcglobal.yahoo.com port 110 use secure connection: ...
    (KDE)