Re: Unix Services / Default Permissions / WinXP_Pro
From: Imhotep (Imhotep_at_nospam.net)
Date: 10/12/05
- Next message: Stephen Bloomer: "Re: Stop users installing Google Earth"
- Previous message: Imhotep: "Re: ICMP Type 8 Echo Request packet security concerns"
- In reply to: Skiingsean: "Re: Unix Services / Default Permissions / WinXP_Pro"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 11 Oct 2005 20:38:10 -0400
Skiingsean wrote:
>
> Yes I agree, the funny part is is that this is a fresh install of the OS
> by
> no more than one week, the previous version was Home with limit control.
> I actually was unaware of the xcacls programs and such as I have become
> more
> native to the *Nix environments over the years. I will look into it a
> little bit more, the problem with using net-nanny and such items is that
> they do not
> accomplish the goals that we are trying to reach. I was able to create
> two separate accounts for the user one with Basic User priveledges and one
> that had Zero privileges so that Only certain apps could be accessed, this
> has worked thus far, though I think that the user has learned to extract
> the Sam using a floppy, so yes I have recently adjusted the boot
> properties.
>
>
> Again, Encryption is currently turned off and nothing is encrypted, I have
> run across that problem with this specific computer/family before.
>
> Again thank you
>
>
>
> "Steven L Umbach" wrote:
>
>> Frankly it sounds like the computer is pretty messed up at this point in
>> time. There is no reason to need to use unix tools to modify file
>> permissions as there are plenty for Windows such as cacls, xcacls, and
>> fileacl. File encryption can lead to a whole bunch of problems if not
>> done properly and the private keys are lost, corrupt, or not available
>> and can be disabled if need be. At this point I would backup all data [to
>> clear text]
>> and configuration settings and completely reinstall the operating system
>> - ideally a pristine install that would require applications and data be
>> restored. The you could look at using third party utilities such as Cyber
>> Sitter, Net Nanny, or the Windows Shared Computer Toolkit to restrict the
>> child's access with the understanding that it is difficult at best to
>> secure a computer from any user that has full physical access to it. It
>> can help to configure cmos to boot only from the hard drive, password
>> protect cmos
>> settings, and using a computer case that lock access to the computer
>> innards though as a parent myself I did not have to take any such
>> teps. --- Steve
>>
>> http://www.microsoft.com/windowsxp/sharedaccess/faq.mspx --- Shared
>> Computer Toolkit free from MS
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222 --- using
>> secedit to reset security settings to default defined levels.
>>
>> "Skiingsean" <Skiingsean@discussions.microsoft.com> wrote in message
>> news:B0ACE7A4-6864-4D72-B392-22DAC6E41210@microsoft.com...
>> > Hello I am trying to help a family safegaurd their PC from a pesky
>> > child. However, at some point I think I have had some SAM corruption
>> > whereas when I
>> > delete or Create some accounts, all of the other accounts usually get
>> > messed
>> > up in that they either dissappear, locked-out, or passwords simply will
>> > not
>> > work. I have deleted all accounts and created new ones using the same
>> > user
>> > name, they were created as UserName.ComputerName, which was not the
>> > case prior.
>> >
>> > My problem NOW is that, under those "new" accounts several folders and
>> > files
>> > are giving Access Denied, these users "Are" administrators, and there
>> > was no
>> > encryption prior. I downloded Unix Services for Win and did a CHMOD
>> > 777 on
>> > all of the previously denied files, now that I have Unix Services on
>> > this PC
>> > I have noticed that newly created files and or downloaded files are
>> > giving
>> > the same error, requiring me to CHMOD them. With these services
>> > enabled where can I set it so that "ALL" files/folders created from
>> > here on out will
>> > have the permissions that I specify (a global permissions policy?)?
>> >
>> > Thanks in advance.
Stay with *NIX, your better off anyway.
Imhotep
- Next message: Stephen Bloomer: "Re: Stop users installing Google Earth"
- Previous message: Imhotep: "Re: ICMP Type 8 Echo Request packet security concerns"
- In reply to: Skiingsean: "Re: Unix Services / Default Permissions / WinXP_Pro"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
