Re: RunAsSet and WinXP -> was

> this sounds like I have to work in the future. No sitting and 
sleeping anymore ;-))

Maybe it will be better for hands, legs and... head.
:-)

Read about this safe approach in Moriae Encomium by Desiderius 
Erasmus in File/Misc of this group.

Valery

--- In [email protected], "stefan@..." <stefan@...> wrote:
>
> @larrydalooza: It is a Windows Share
> @valery:
> If I am right, the Type of Share you are talking about is 
the "Client" side. Correct me if I am
> wrong, but I think this has nothing to do with accessing a server 
share. btw, the Guest account is
> disabled, the pc belongs to a domain and the Simple File Sharing 
is turned off. OS=XP SP2. Firewall
> is turned off
> 
> This problem is realy confusing and frustrating. I have a lot of 
scripts here to install or update
> some Software, and none of it is working since we use XP......... 
No Automation anymore. UUUUHHHHH
> this sounds like I have to work in the future. No sitting and 
sleeping anymore ;-))
> 
> Regards,
> Stefan
> 
> ----- Original Message -----
> From: valery_vi
> To:  [email protected]
> Sent:  Wed, 25 Oct 2006 06:05:23 -0000
> Subject: [AutoIt] Re: RunAsSet and WinXP -> was "msiexec is 
running on w2k but not on XP"
> 
> BTW. About the Guest Account after denition of the Simple File 
> Sharing model:
> "....
> Make sure the Guest Account is Disabled
> 
> This setting recommendation applies only to Windows XP 
Professional 
> computers that belong to a domain or to computers that do not use 
> the Simple File Sharing model.
> 
> On Windows XP Professional systems that are not connected to a 
> domain, users who attempt to log on from across the network will 
be 
> forced to use the Guest account by default. This change is 
designed 
> to prevent hackers attempting to access a system across the 
Internet 
> from logging on by using a local Administrator account that has no 
> password. To use this feature, which is part of the Simple File 
> Sharing model, the Guest account must be enabled on all Windows XP 
> computers that are not joined to a domain. For those computers 
that 
> are joined to a domain, or for unjoined computers that have turned 
> off the Simple File Sharing model, the Guest account should be 
> disabled. This will prevent users attempting to log on to the 
> computer from across the network from using the Guest account."
> 
> See here,
> 
http://www.microsoft.com/technet/archive/security/chklist/xpcl.mspx?
> mfr=true
> 
> Shortly speaking XP has more clever security than safe Win2k.
> :-)
> 
> Valery
> 
> 
> 
> --- In [email protected], "valery_vi" <shehrer1@> wrote:
> >
> > Simple File Sharing can influence on access to folder and files. 
> > 
> > Because
> > 1.
> > "With Microsoft Windows XP, you can share files and documents 
with 
> > other users on your computer and with other users on a network. 
> > There is a new user interface (UI) named Simple File Sharing and 
a 
> > new Shared Documents feature."
> > 
> > 2.
> > "If you turn on and turn off Simple File Sharing, the 
permissions 
> on 
> > files are not changed. The NTFS and share permissions do not 
> change 
> > until you change the permissions in the interface. If you set 
the 
> > permissions with Simple File Sharing enabled, only Access 
Control 
> > Entries (ACEs) on files that are used for Simple File Sharing 
are 
> > affected. The following ACEs in the Access Control List (ACL) of 
> the 
> > files or folders are affected by the Simple File Sharing 
> > interface: • Owner 
> > • Administrators 
> > • Everyone 
> > • System 
> > "
> > 
> > About "How to configure file sharing in Windows XP" see 
> > http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q304040
> > 
> > Valery
> > 
> > --- In [email protected], Stefan Lubitz <stefan@> wrote:
> > >
> > > hmmm, but it is realy a public share. Everyone can see and 
> access 
> > it. I 
> > > tried it also with the UNC name (\\server\path\file)
> > > Same result. I also tried the user I normaly use for 
installing 
> > Software 
> > > on the Client machine. If I log on to the Client with this 
user, 
> I 
> > can 
> > > see and access the share. The same user is not working with 
> RunAs. 
> > It 
> > > should work? Or am I wrong?
> > > 
> > > Stefan
> > > 
> > > Valik schrieb:
> > > > Stefan Lubitz wrote:
> > > >   
> > > >> The Directory is a public Share on the Network 
> > (t:\updates\sametime
> > > >> which is \\bies002\projekt\program\updates\sametime)
> > > >> I have tried to use both expressions instead of the 
> @scriptdir 
> > with the
> > > >> same result.
> > > >> The access to the directory is given and I have tried to 
make 
> a
> > > >> fileexist check before, which returns 1, which means file 
is 
> > existing.
> > > >> If I don't use RunAsSet, and I am logged on with the same 
> user 
> > I use in
> > > >> the Script, it is working. So am am pretty sure that it has 
> > something to
> > > >> do with the RunAsSet function and the access to the network.
> > > >> The strange thing is, that if I run it from the local 
desktop 
> > (with
> > > >> using @scriptdir) it is working.
> > > >>
> > > >> Stefan
> > > >>
> > > >>     
> > > >
> > > > Then you have encountered the second most common problem 
> people 
> > make 
> > > > with RunAs().  They assume "because I can see the share, the 
> > user I'm 
> > > > trying to run as can see the share".  Checking if the 
current 
> > user can 
> > > > see the share is irrelevant.  The account you are going to 
run 
> > as needs 
> > > > to be able to see the share.  Log into that account manually 
> and 
> > see if 
> > > > you can see the share.  My guess is no, you can not.
> > > >
> > > >
> > >
> >
> 
> 
> 
> 
> 
>  
> Yahoo! Groups Links
> 
> 
> 
> 
> 
> 
> [Non-text portions of this message have been removed]
>





 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/AutoItList/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/AutoItList/join
    (Yahoo! ID required)

<*> To change settings via email:
    mailto:[email protected] 
    mailto:[email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/