[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 179
  • Last Modified:

Local Security Policy settings

**Access this computer from the network
If deny access to "everyone", will it have an effect on applications that can communicate via ethernet

**Deny access to this computer from the network
Here I can define users in the same workgroup or domain that I do not want accessing this computer...correct?



**Lan manager authentication level
This is here for backward compatibility with older OS's that do not support NTLM correct? What is the secure setting to set this to

Thanks
0
dissolved
Asked:
dissolved
  • 4
  • 2
1 Solution
 
Pete LongConsultantCommented:
>>If deny access to "everyone", will it have an effect on applications that can communicate via ethernet

NEVER -EVER Deny Access to the everyone group - remember administrators are part of the everyone group :)
0
 
Pete LongConsultantCommented:
>>with older OS's that do not support NTLM correct?

9x and NT and 2K support NTLM - 2K3 does NOT support NTLM out of the box you have to downgrade it
0
 
dissolvedAuthor Commented:
Interesting. I didnt know NTLM was not supported on 2k3 out of the box. What does 2k3 use instead of NTLM? Something more secure?
Thanks, giving you the question
0
Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

 
Pete LongConsultantCommented:
>>What does 2k3 use instead of NTLM? Something more secure?

Kerberos - thats why to have NT4 or 9X on a 2K3 doamin you have to lower the authentication levels as these machines only understand NTLM

Remember When assigning permissions allways "Remove" groups never Deny Things - it makes it easier to track what the hell is going on when things break :)

Pete

0
 
dissolvedAuthor Commented:
so lanman and NTLM only apply to nt4  and 9x.  2k cant speak kerberos right?
0
 
Pete LongConsultantCommented:
Yes
And
Yes
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now