RE: Windows XP Security Guide - Laptop Policy

david.2.adamson_at_bt.com
Date: 11/24/05

  • Next message: Core FORCE team: "ANN: Free endpoint security software released (Core FORCE 070.105)" 
    Date: Thu, 24 Nov 2005 15:59:49 -0000
To: <focus-ms@securityfocus.com>

    Ignore, Ive managed to get through to one of the other admins. Some of
    the settings needed changing, first and most importantly deny access to
    this computer from network was set to Everyone!!!!

    Changed to guests/support_... and all looking much rosier.

    -----Original Message-----
    From: Adamson,D,David,JPGA4Y C
    Sent: Thursday, November 24, 2005 1:15 PM
    To: focus-ms@securityfocus.com
    Subject: Windows XP Security Guide - Laptop Policy

    I have an environment that I have set up for a customer using the
    Windows 2003 Security Guide and enterprise policy settings. This is all
    fine, I have also implemented the enterprise security policies from the
    Windows XP security guide. I have set up both the enterprise desktop
    policy and also the enterprise laptop policies + the environment
    specific and local account changes.

    I have been getting calls from the administrator saying they are unable
    to do a few things on the Laptops:

    1. Remotely manage them properly from another desktop/laptop/server
    ie. Red X in users and groups, access denied on services, eventvwr etc
    2. The main one - They are unable to offer assistance to Laptops,
    they offer to any of the desktops without issues.

    The firewall exceptions are all correct, even with the firewall disabled
    we still get permission denied instantly. The remote is enabled on the
    machine and also via group policy with the correct group populated. It
    seems to be a security difference between the desktop and laptop policy
    in the security guide that is causing offer assistance to fail but not
    on site and so cant really have a good look. They are able to RDP into
    the Laptops though?

    Any help, direction would be greatly appreciated.

    Rgds
    Dave Adamson

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Core FORCE team: "ANN: Free endpoint security software released (Core FORCE 070.105)"

    Relevant Pages

    • Windows XP Security Guide - Laptop Policy
      ... Windows 2003 Security Guide and enterprise policy settings. ... seems to be a security difference between the desktop and laptop policy ...
      (Focus-Microsoft)
    • Re: Security templates and IUSR account log on locally
      ... You may also want to revisit the download for the W2k3 Security Guide as ... The Microsoft group policy Enterprise security template for Member ... The Member Server template is a baseline for all servers. ...
      (microsoft.public.inetserver.iis.security)
    • Re: to secure stations with gpo
      ... Windows XP Security Guide: ... In addition, I recommend the Group Policy Settings Reference spreadsheet, ... MVP Windows Server - Networking ... If a web site presents ...
      (microsoft.public.windows.server.general)
    • RE: Performing Cleanup failes when installing patches
      ... I'm applying the following policy from the Security Guide: ... DON'T install the PSP. ...
      (microsoft.public.windows.server.general)