Re: permissions anomaly in XP noted by W2K user
From: Roger Abell (mvpNoSpam_at_asu.edu)
Date: 09/20/03
- Next message: Roger Abell: "Re: WUAU32.msi will not install on WinXPSP1 PC"
- Previous message: Nicholas: "Re: Windows 2000 encrypted files"
- In reply to: JohnB: "Re: permissions anomaly in XP noted by W2K user"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 19 Sep 2003 15:30:27 -0700
John,
XP Home is simplified for the consumer market.
If one used NTFS as the filesystem then it does have the
full compliment of security as does XP Pro, but it is used
differently.
Home is permanently in Simple sharing mode.
This means that network accesses to shared files are all
mapped to the Guest account. If one access a share that
Home shares out, then the NTFS level checks that are
important are the grants to the Guest account, even if
one has authenticated as account "username"
This mapping to the Guest account makes all sharing from
a Home version system "of one flavor" since everything
ends up checking against grants to the same account.
Roger
"JohnB" <johnb@nospam.com> wrote in message
news:vmlv2o4bunp7d@corp.supernews.com...
> I have looked again at an XP Home computer. My hope is to avoid the
hassle
> and expense of upgrading my friend's computer to XP Pro. I would be
> successful if only I could provide some sort of security on the folders he
> "shares." Let's just say he and two other small business owners have one
> wireless router and one DSL line. There are other business owners in
close
> proximity. My friend is not concerned in an urgent manner, but we both
want
> to prevent unauthorized viewers from seeing his files.
>
> My first approach was to implement NTFS file permissions, so that only
named
> users under his OS could have access, whether sitting at his computer, or
> accessing over a network. Since XP Home can't provide such security, I
> looked into "share permissions." It seems these are not available,
either.
> I guess XP Home is utterly unsecure, as an operating system, except
through
> the "front door" (logon).
>
> The only "security" I observed, under "share security," was to
> allow/disallow networked users from modifying files within the host
> computer. There is no provision for granting various levels of access to
> different users.
>
> Can you confirm this impression?
> Am I overlooking something?
> We don't want to use encryption.
>
> I haven't visited my friend's site physically, but I have asked him to sit
> at his neighbor's computer, and test-"hack" into his own XP Home computer.
> He hasn't gotten back to me on his results, yet.
>
> Thanks,
> John
>
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:#y8NxDheDHA.2140@TK2MSFTNGP09.phx.gbl...
> > Home is hard coded to only support Simple file sharing,
> > and so that checkbox is not in Home. Home can only have
> > access to the NTFS security dialog when in an F8 Safe Mode
> > boot.
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows, Security)
> > MCSE (W2k3,W2k,Nt4) MCDBA
> > "JohnB" <johnb@nospam.com> wrote in message
> > news:vm60m3t7afif96@corp.supernews.com...
> > > My friend has taken his WXP Pro computer home, and I have only been
able
> > to
> > > view a WXP Home computer since you offered your reply to my posting.
I
> > > expect my friend to view his XP Pro computer later today, and I have
> > > forwarded your advice to him. I will speak with him by telephone.
> > >
> > > In viewing the XP Home computer (with administrator-level access), I
> > notice
> > > no such check-box under My Computer, Tools, Folder Options, View Tab.
> The
> > > XP Home scenario looks the same as that permissions scenario I
observed
> on
> > > the XP Pro computer, which is minimalist and decimated. Is XP Home
> > deprived
> > > of the option of which you speak?
> > >
> > > I have an excellent comparison of XP Home and XP Pro, by Paul
Thurrott,
> > that
> > > dates back to December, 2001. Regrettably, that comparison does not
> seem
> > to
> > > be posted anymore at site http://www.winsupersite.com/reviews/
> > > Nevertheless, there is no mention in that essay of a difference
whereby
> > Pro
> > > can opt for non-simple file sharing, while Home has no such option.
> > >
> > > Am I, therefore, overlooking something in the Home platform?
> > >
> > > Thanks,
> > > John
> > >
> > > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> > > news:OcAMJPZeDHA.2436@TK2MSFTNGP11.phx.gbl...
> > > > Go to the Folder Options and in the View tab
> > > > at the bottom shut off Simple file sharing mode.
> > > > Then things will be as you are familiar from W2k
> > > > for both NTFS and Share level permissions.
> > > >
> > > > --
> > > > Roger Abell
> > > > Microsoft MVP (Windows, Security)
> > > > MCSE (W2k3,W2k,Nt4) MCDBA
> > > > "JohnB" <johnb@nospam.com> wrote in message
> > > > news:vm4gs0j7rgm0ba@corp.supernews.com...
> > > > > I have been helping my friend establish permissions on his XP Pro
> > > > computer.
> > >
> > >
> >
> >
>
>
- Next message: Roger Abell: "Re: WUAU32.msi will not install on WinXPSP1 PC"
- Previous message: Nicholas: "Re: Windows 2000 encrypted files"
- In reply to: JohnB: "Re: permissions anomaly in XP noted by W2K user"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
