Re: RunAsSet and WinXP -> was "msiexec is running on w2k but not on XP"

BTW. About the Guest Account after denition of the Simple File 
Sharing model:
"....
Make sure the Guest Account is Disabled

This setting recommendation applies only to Windows XP Professional 
computers that belong to a domain or to computers that do not use 
the Simple File Sharing model.

On Windows XP Professional systems that are not connected to a 
domain, users who attempt to log on from across the network will be 
forced to use the Guest account by default. This change is designed 
to prevent hackers attempting to access a system across the Internet 
from logging on by using a local Administrator account that has no 
password. To use this feature, which is part of the Simple File 
Sharing model, the Guest account must be enabled on all Windows XP 
computers that are not joined to a domain. For those computers that 
are joined to a domain, or for unjoined computers that have turned 
off the Simple File Sharing model, the Guest account should be 
disabled. This will prevent users attempting to log on to the 
computer from across the network from using the Guest account."

See here,
http://www.microsoft.com/technet/archive/security/chklist/xpcl.mspx?
mfr=true

Shortly speaking XP has more clever security than safe Win2k.
:-)

Valery



--- In [email protected], "valery_vi" <shehrer1@...> wrote:
>
> Simple File Sharing can influence on access to folder and files. 
> 
> Because
> 1.
> "With Microsoft Windows XP, you can share files and documents with 
> other users on your computer and with other users on a network. 
> There is a new user interface (UI) named Simple File Sharing and a 
> new Shared Documents feature."
> 
> 2.
> "If you turn on and turn off Simple File Sharing, the permissions 
on 
> files are not changed. The NTFS and share permissions do not 
change 
> until you change the permissions in the interface. If you set the 
> permissions with Simple File Sharing enabled, only Access Control 
> Entries (ACEs) on files that are used for Simple File Sharing are 
> affected. The following ACEs in the Access Control List (ACL) of 
the 
> files or folders are affected by the Simple File Sharing 
> interface: • Owner 
> • Administrators 
> • Everyone 
> • System 
> "
> 
> About "How to configure file sharing in Windows XP" see 
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q304040
> 
> Valery
> 
> --- In [email protected], Stefan Lubitz <stefan@> wrote:
> >
> > hmmm, but it is realy a public share. Everyone can see and 
access 
> it. I 
> > tried it also with the UNC name (\\server\path\file)
> > Same result. I also tried the user I normaly use for installing 
> Software 
> > on the Client machine. If I log on to the Client with this user, 
I 
> can 
> > see and access the share. The same user is not working with 
RunAs. 
> It 
> > should work? Or am I wrong?
> > 
> > Stefan
> > 
> > Valik schrieb:
> > > Stefan Lubitz wrote:
> > >   
> > >> The Directory is a public Share on the Network 
> (t:\updates\sametime
> > >> which is \\bies002\projekt\program\updates\sametime)
> > >> I have tried to use both expressions instead of the 
@scriptdir 
> with the
> > >> same result.
> > >> The access to the directory is given and I have tried to make 
a
> > >> fileexist check before, which returns 1, which means file is 
> existing.
> > >> If I don't use RunAsSet, and I am logged on with the same 
user 
> I use in
> > >> the Script, it is working. So am am pretty sure that it has 
> something to
> > >> do with the RunAsSet function and the access to the network.
> > >> The strange thing is, that if I run it from the local desktop 
> (with
> > >> using @scriptdir) it is working.
> > >>
> > >> Stefan
> > >>
> > >>     
> > >
> > > Then you have encountered the second most common problem 
people 
> make 
> > > with RunAs().  They assume "because I can see the share, the 
> user I'm 
> > > trying to run as can see the share".  Checking if the current 
> user can 
> > > see the share is irrelevant.  The account you are going to run 
> as needs 
> > > to be able to see the share.  Log into that account manually 
and 
> see if 
> > > you can see the share.  My guess is no, you can not.
> > >
> > >
> >
>





 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/AutoItList/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/AutoItList/join
    (Yahoo! ID required)

<*> To change settings via email:
    mailto:[email protected] 
    mailto:[email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/