SimpleFileSharing & Security Tab problems - GP only way to fix?

[Guest]

Hello everyone -

OK- Im new and still learning. I have a pc that I am playing around with -
It is not connected to a Domain/Active Directory etc. Its a standalone
machine with Cable access which I remote to from my location.

I noticed that files/folders under user profiles give that user the
permission to alter the security permissions. Essentially giving that user
the right to prevent any access from the Administrators group.....

...because of that...I then noticed, that a limted user can then also go to
Tools-Folder Options- and re-enabled Simple File Sharing!

Is this the default behaivor? And is the only way to fix this is by going
into group policy and setting it to hide the security tab and to hide folder
options from the tools menu?

...and 1 more by the way... I really hate when I make these type of changes
in GP that it also applies to me in my Administrator account. (there are 5
limited users - Mother in law PC is my test system LOL ). Is there any way
to make these local gp changes and not also effect my account?

.....Please school me....

Thank You

 

[Colin Nash [MVP]]

Hello everyone -

OK- Im new and still learning. I have a pc that I am playing around
with -
It is not connected to a Domain/Active Directory etc. Its a standalone
machine with Cable access which I remote to from my location.

I noticed that files/folders under user profiles give that user the
permission to alter the security permissions. Essentially giving that
user
the right to prevent any access from the Administrators group.....

..because of that...I then noticed, that a limted user can then also go to
Tools-Folder Options- and re-enabled Simple File Sharing!

Is this the default behaivor? And is the only way to fix this is by going
into group policy and setting it to hide the security tab and to hide
folder
options from the tools menu?

..and 1 more by the way... I really hate when I make these type of changes
in GP that it also applies to me in my Administrator account. (there are
5
limited users - Mother in law PC is my test system LOL ). Is there any
way
to make these local gp changes and not also effect my account?

....Please school me....

Thank You

Even if you hide the Security tab on the graphical interface, users could
still change permissions with command-line tools, scripts etc. They still
have the underlying permissions to the folders.

Yes, by default they have Full Control over their own profiles. This lets
them remove administrators from the permissions, but an administrator could
always go back and re-add himself if needed. You could try changing the
user's permissions on the profile folder from Full Control to Modify, but
test it out first.

As you've noticed, group policy is not very flexible on standalone
(non-domain) computers. Check out the Shared Computer Toolkit:
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

 

[Steven L Umbach]

You should notice that while a regular user can click on simple file sharing
it does not actually enable it and you should see this when you check that
setting again - at least that is my experience. Also simple file sharing has
nothing to do with "local" computer access to folders and files via NTFS
permissions as it affects only the way the operating system allows access to
network shares on that computer from network users.

Steve

 

[Guest]

Thank you for the reply Colin and Steve. Thanks for the MS Shared Computers
Toolkit ( I will install Monday evening and try it out - it sounds pretty
good from the documentation ).

Again thank you both for the replies - It has helped me very much. I am
still learning...I am studying for my MCSE cert. - I am starting with 270....

....Out of curiosity which Virtual Machine app would you guys recommend.

Thanks

 

[Steven L Umbach]

I have Microsoft Virtual PC 2004 and it seems to work fine but I have not
compared to anything else. I think you can download it for free from
Microsoft. As far as your MCSE if you do not have it yet I highly recommend
that you but Mark Minasi's Mastering Windows 2003 Server even though it is
not an exam guide. It is just a great book to learn most of what is needed
to know and it has a lot of great examples. Another book I think you will
find useful for study and the real world is the Microsoft Press Windows
Security Resource Kit second edition. The free Microsoft Windows 2003 Server
Deployment Kit is also something you want to start referring to.

Steve

http://www.microsoft.com/windowsserver2003/techinfo/reskit/deploykit.mspx
--- Windows 2003 Deployment Kit
http://labmice.techtarget.com/ --- another great website for learning
Windows