Re: win98 stations bypass 2000server security and have full access

From: Steven L Umbach (sumbach@ameritech.net)
Date: 09/28/02


From: "Steven L Umbach" <sumbach@ameritech.net>
Date: Sat, 28 Sep 2002 13:29:51 GMT


    Check permissions on your shares and ntfs - especially the everyone
group. Effective permission for any group/user is the most restrictive of
the two. My guess is that the W98 users are accessing via only the everyone
permissions while the NT users are also members of the users group. ---
Steve

"Bob Karon" <bob@rke.net> wrote in message
news:bd2d01c266f1$ebdc4cb0$35ef2ecf@TKMSFTNGXA11...
> We recently upgraded a windows nt4 server that was useing
> directory shares for permissions as its security. We
> upgraded to 2000 server and a tech setup what i believe he
> called ntsf group permissions(?). Windows 2000 and nt
> workstations work fine, and can only access what we want
> them to access. But windows 98 machines connect in, but
> when browsing the network, get access to everything, it
> just lets them go whereever they want and read/write
> anything. Only on the 98 workstations. What could be
> allowing them to do this? We check the simple things,
> like they dont have admin priv., etc. The same user
> loggin into a nt4ws can not access anything but their
> speicifc files, same login on a win98 can do anything.
>
> Bob



Relevant Pages

  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: Unnown process... 5eplorer.exe
    ... do not remove the cause (a "super"-hidden .dll program) but only remove ... symptom files and registry settings. ... It has all permissions but 'copy' denied to everyone, ... then by using the Windows XP Recovery Console. ...
    (microsoft.public.win2000.general)
  • RE: dcom permissions and vista?
    ... user BLAH with Local Activation and Local Launch permissions. ... Windows Vista indeed do some changes in handling DCOM and you may need to ... Windows Vista introduces the notion of Mandatory Access Labels in security ... Microsoft Online Community Support ...
    (microsoft.public.vc.atl)
  • Re: Passwords on Folders
    ... domain computer [there is also a recovery agent for a domain]. ... > Windows under which those permissions were defined. ... use NTFS on your hard drives so you can then EFS ...
    (microsoft.public.win2000.security)
  • RE: SBS 2003 Outoging Fax Problem w/Error 32028 (Cannot send - fatal error)
    ... 1.Reduce the baud rate of the incoming fax modem and see how it goes. ... Click Permissions and verify that the user attempting to fax has at ... 3.If you have configured the fax client on the Windows XP computer ... On the "Additional Server Types" page, ...
    (microsoft.public.windows.server.sbs)