resetting security settings to "out of the box" ?

  • Thread starter Thread starter RS
  • Start date Start date
R

RS

How can I use XP Pro's MMC to reset local security settings to "out of the
box" settings ? A friend told me that he thought it was possible for MMC to
simply do that. I looked at the console but could not figure out how to do
that.

Thanks for any tips !

-RS-
 
Thanks,

Before I try that, perhaps I should explain why I want to reset XP Pro back
to "out of the box" :

When you share a folder with a new XP Pro installation, the default
setting (Tools/Folder Options/View) is "use simple file sharing", which is
"Recommended".

In this state all the other computers (a Win2K desktop, a XP Home laptop,
and a Mac G4 laptop) on my simple peer-to-peer network (D-Link switch
connecting the 4) could see and access the shared folders on the WinXP Pro
machine. (We use the WinXP Pro machine to host the shared folders.) No
password or user name was prompted for.

However one day I decided to see if I could enable proper sharing and
de-checked that box (turned simple file sharing off), and have the users
sign in with their username/logins (ones they use on the WinXP Pro machine).
There was no problem for users to access the XP Pro machine via either the
Win2K machine or the XP Home machine. However the Mac G4 could no longer
see the shared folders.

Further, going back to the "simple file sharing" setting -- did not restore
the connectivity for the Mac. Why should that be ??

Even more surprizingly, it did not restore connectivity for the Win2K
machine either (have not tested the XP Home laptop yet) -- why should that
be?

Thanks for any insights !

-RS-
 
This sounds more like a change of NTFS premissions, or of
access permissions on the shares, which did not get reversed.
For the Mac, I have no clues as I do not use Mac interop.
If you were to carefully examine both the share and the NTFS
permissions, the W2k access issue should be resolvable.
In our production env we do support a small number of Mac
clients, which install the Mac NTLM login client, and from
that point on they can access our secured shares.
 
I gather NTFS permissions are in the same area as the general shares setup?
That all disappears in XP Pro when you re-select "simple file sharing".

Should I de-select simple file sharing ... and then make she sharing
situation as wide open as possible ... and then re-select simple file, to
see if that helps? That sounds hokey and unlikely to work, but what do I
know ! ;-)

Does the Mac NTLM come with Mac OS X ?

Thanks !

-RS-
 
I do not really know on the Mac issue, only that when Mac
support is installed in Windows server versions, there is an
application left for use on the Macs to make them NTLM savy.

If you want to have the machine in Simple sharing mode your
can still use the Security dialog if you boot into safe mode.
Also, NTFS permissions can be managed by use of the cacls.exe
commandline utility. cacls /? will provide info on usage.
 
Back
Top