Re: XP Pro file permissions
From: Wesley Vogel (123WVogel955_at_comcast.net)
Date: 03/18/04
- Next message: Kray: "Hiding SharedDocs from "My Network Place""
- Previous message: Rob Moslosky: "User security group for Update Installation"
- In reply to: Andrey Tarasevich: "Re: XP Pro file permissions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 18 Mar 2004 15:04:01 GMT
Andrey;
Well, that is a moot point for me. The only users I have
active on my machine are me and the Administrator. All others
are disabled through secpol.msc.
Keep having fun.
-- Hope this helps. Let us know. Wes In news:105in3p27ic15d3@news.supernews.com, Andrey Tarasevich <andreytarasevich@hotmail.com> hunted and pecked: > Wesley Vogel wrote: >> ... >> I don't believe that Administrators are part of the Users Group. >> That makes no sense to me. >> ... > > Nevertheless, this turns out to be the case. More precisely, a locally > logged-in Administrator automatically becomes member of Users group. > If you take a look at your Users group, you'll see that it contains > another system group - 'NT AUTHORITY/INTERACTIVE'. Everybody who > logs-in locally automatically becomes a member of 'NT > AUTHORITY/INTERACTIVE' group and, transitively, 'Users' group. That's > what caused the behavior that I observed. > > Another consequence of this is that every Guest that logs-in locally > automatically becomes a member of Users group and gets its permissions > expanded to permissions of a regular User (!). In order to limit > Guest's permissions one has to place 'Deny' settings for Guests group > explicitly in all strategical places. > > -- > Best regards, > Andrey Tarasevich
- Next message: Kray: "Hiding SharedDocs from "My Network Place""
- Previous message: Rob Moslosky: "User security group for Update Installation"
- In reply to: Andrey Tarasevich: "Re: XP Pro file permissions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
