Home | Troubleshooting |  Quick Setup  |  Cisco How to  |  Data Recovery  |  Forums   | Blog | IT Exam Practice | Services  | About Us | Chicagotech MVP  | Search  | Contact Us  |                 

 

Security

Any tools to export and import Windows Local User accounts with password?
Backup Bitlocker to a network location automatically
Can't enable guest account
Cannot add a new local user
Change all Local Administrator Password in domain
Command to check security of files and service
enable "Password Never Expire"
Fixing “We Need You To Fix Your Microsoft Account (most likely your password changed)”
How Inheritance Affects File and Folder Permissions

How long will cached domain credential be stored in Windows client
How to add a Computer Account to a shared folder  - Step by step with screenshots 
How to access Domain Console without logon the domain
How to Add, Backup or restore credentials in Vista
How to check the group policy settings and result

How to change the password policy
How to change user password using command line
Check permission command line
How to check user password expiration date
How to configure Authentication on XP
How to configure Windows firewall for file sharing
How to: check permissions using Vista icacls command
How to disable delete permission in NTFS - Step by step with screenshots 
How to Edit/Remove Windows Saved Password
How to enable Active Directory security auditing
How to enable BitLocker Drive encryption in Windows 10
How to enable workstation security auditing
How to let non-administrative user renew IP.
How to manage credentials on Windows - Step by step with screenshots
How to manage inherited permissions

How to open an Administrative Windows Explorer
How to permit access to create Scheduled Tasks for non-Admin
How to protect my computer without buying hardware or software firewall
How to Reset Security Settings Back to the Defaults
How to remove saved password in an Internet browser.
How to take ownership of a file or folder in Windows
How to uninstall Zone Alarm

How to use CopyRight2 to copy Windows user accounts with the password?
How to use Robocopy to set permission without copying any files
HP Single Sign On
Logon script doesn't work
Move data to a new HD with the same security settings
One user can't make share, see the shared sign
Robocopy - windows 2008
Run script as administrator when regular user logon
Should I disable Anti-virus when installing Microsoft Update
"Not accessible. You may not have permission to use this network resource"
The password does not meet the password policy requirement
The security settings to managing XP Firewall
The Sharing tab is not visible
Understand Allow and Deny permissions
View who owns a particular file or directory
Which ports need to open in Win 2003 DC firewall enabled
Why can't I have permission button while setup sharing on XP
Why do I need password
Why do I get \S-1-51-xxxxx as a user/group name

Post your questions, comments, feedbacks and suggestions

Contact a consultant


Can't enable guest account

To enable guest account on w2k/xp, you must logon as administrator.

Cannot add a new local user

 Cause: you are using domain credentials to add a new user on a computer that doesn’t connect to the domain.

 For the consultants, refer to case 101404SO

How Inheritance Affects File and Folder Permissions

After you set permissions on a parent folder, new files and subfolders that are created in the folder inherit these permissions. If you do not want the files and folders to inherit permissions, click This folder only in the Apply onto box when you set up special permissions for the parent folder. If you want to prevent only certain files or subfolders from inheriting permissions, right-click the file or subfolder, click Properties, click the Security tab, click Advanced, and then click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box.

If the check boxes are not available, the file or folder has inherited permissions from the parent folder. There are three ways to make changes to inherited permissions:

  • Make the changes to the parent folder so that the file or folder inherits the permissions.
  • Click to select the opposite permission (Allow or Deny) to override the inherited permission.
  • Click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box. When you do this, you can make changes to the permissions or remove the user or group from the permissions list. However, the file or folder does not inherit permissions from the parent folder.

How to access Domain Console without logon the domain

Sample issue: I have group policy that is locking down the computer for ALL User, Even the administrator. Now I cant access the domain network from any computers

Solution: Logon as the administrator with the same password of the domain administrator. Then access the AD Users and Computers-Connected to the domain controller. Moved the admin accounts up to the Users OU.

How to check the group policy settings and result

You can use gpresult.exe which displays the resulting set of policies that were forced on the client for the specified user at logon.1.

How to manage inherited permissions

By default, Everyone has Full Control for a NTFS folder and the permission is inherited from the root folder on the partition or volume. To block Permissions Inheritance, click to clear the Allow inheritable permissions from parent to propagate to this object check box.

How to change the password policy

For local computer, go to Local Computer Policy>Computer Configuration>Windows Settings>Security Settings>Account Policies>Password Policy. For domain controller, go to Default Domain Security Setting>Security Settings>Account Policies>Password Policy.

How to protect my computer without buying hardware or software firewall

1. Enable ICF if you have XP or 2003.
2. Enable TCP/IP Security.
3. Enable IPSec Policies.
4. Enable RRAS Packet Filters.

Logon script doesn't work

Symptoms: the logon script doesn't run when some users logon.

Resolutions: 1. Everyone doesn't  have read right to C:\%rootsystem%\system32\repl\script\import.
2. Also check the netlogon under My Computer Manage.

One user can't make share, see the shared sign

Symptoms: 1. Can't make share folders on your local computer;
2. Can't see shared sign on your local computer;
3. Net share gets "Access denied"

Cause: you don't have permission.

The security settings to managing XP Firewall

Go to Local Computer Policy\Computer Configurations\Admin Templates\Network\Network Connections\Internet Connection Firewall.

Not accessible. You may not have permission to use this network resource

Symptom: Your WinXP,  in a peer-to-peer mixed network,  may receive the following error when you double-click My Network Places/Computers Near Me: <Workgroup Name> is not accessible. You may not have permission to use this network resource.

Resolution: 1) Enable NetBIOS over TCP/IP on one or more computers in the workgroup. To do that, go to properties of Local Area Connection>properties of Internet Protocol (TCP/IP)>General> Advanced>WINS, check Enable NetBIOS over TCP/IP (If you have a DHCP-assigned IP address, select Use NetBIOS setting from the DHCP server ). 2) Make sure the Computer Browser service is started.

The password does not meet the password policy requirement

Symptoms:  when  attempting to create a new account with a password or change the password on 2003 server and the member of computers, you may receive this messages "Windows cannot complete the password change. The password does not meet the password policy requirement. Check the minimum password length, password complexity and password history requirement".

Cause: The default minimum password length is 7 and the password must meet complexity requirement on 2003 domain controller. By default, member of computers follow the password configuration of the their domain controller.

The Sharing tab is not visible

The sharing tab is not visible if you are logged on to a machine with an account that does not have adequate rights. 

Understand Allow and Deny permissions

A: 1) Allow permissions are cumulative, so a user's permissions are determined by the cumulative effect of all of the groups to which the user belongs. 2) Deny permissions override Allow permissions. Use caution when you apply Deny permissions.

Why can't I have permission button while setup sharing on XP

The reason you can't see the permission is because the XP simple file sharing is enabled. To disable simple file sharing, go to windows explorer>tools>folder options>view, uncheck use simple file sharing. Just remember that, after disabling simple file sharing, some users may have
difficulty to access the sharing folders.

Why do I get \S-1-51-xxxxx as a user/group name

Symptoms: 1. When check the member of a group, it takes long time to open and you may see one or some members are listed as \S-1-51xxxx. 2. When checking the Security of a file or folder, you may see one or more user/groups are listed as \S-1-51-xxxx.

Causes: The workgroup or domain that the users, groups or members are belong to is offline

 

   This web is provided "AS IS" with no warranties.
Copyright © 2002-2021 ChicagoTech.net, All rights reserved. Unauthorized reproduction forbidden.