Re: local login rights

From: Kilian CAVALOTTI (kilian.cavalotti@crans.org)
Date: 01/23/02 

From: "Kilian CAVALOTTI" <kilian.cavalotti@crans.org>
To: "Eli Allen" <eallen@mail.bcpl.lib.md.us>, <focus-ms@securityfocus.com>
Date: Wed, 23 Jan 2002 16:33:30 +0100

Hi,

Verify that your 'Log on locally' setting do not contain the guest
account. It seems to override the 'Deny logon locally' policy.

Regards, 

--
{XP}K.
FE9F 879A D006 360E C598
0A4B F47F 2904 D657 340C

----- Original Message -----
From: "Eli Allen" <eallen@mail.bcpl.lib.md.us>
To: <focus-ms@securityfocus.com>
Sent: mercredi 23 janvier 2002 07:36
Subject: local login rights

> What is the "Deny login locally" right supposed to do?  I always
thought
> that should prevent you from logging into the box when you are local
(i.e.
> at the keyboard) so you basically can't have a login that gets you to
a
> desktop.
>
> But it seems like thats not true, at least in WinXP from a clean
install.
> The guest account is set to "Deny login locally" in the local security
> policy but if you enable the guest account you can login with that
account.
> I thought that shouldn't be allowed.
>
>
> --
> Eli Allen
> eallen@bcpl.net
>

Relevant Pages

  • Re: FTP problem with more than 2 users configured
    ... If you got 530, can't login. ... then it might be due to logon policy or account ... if you 'clone' that user to another account, ... > after the installation of Exchange Server 2003. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: xp shared printer wants password to connect. need to disable
    ... you can do so through Local Security Policy. ... > the guest accout did work. ... >> file sharing is enabled see Control ... >> If Not using simple file sharing, you need an account on the XP box ...
    (microsoft.public.windowsxp.print_fax)
  • Re: Network 2k to 2k without needing to login?
    ... I'd leave Guest disabled, and create login accounts & passwords identically ... computers if you really don't care about security. ... > XP I have to activate the Guest account on there to access ...
    (microsoft.public.win2000.setup)
  • Re: Administrator Profile corruption
    ... It's an interesting thought, although I presume that any user account, ... the Default Domain Policy and Default DC Policy assuming the User ... However maybe this is a clue: When I RDP into server login, ... I'm on administrator.clc.006 it just creates a new profile everytime ...
    (microsoft.public.windows.server.sbs)
  • Win2k Pro: Password Problem
    ... After the laptop being restared I couldnt ... Try it on your guest account. ... disable you can login as guest. ...
    (microsoft.public.win2000.security)