• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 183
  • Last Modified:

Local Security Policy settings

**Access this computer from the network
If deny access to "everyone", will it have an effect on applications that can communicate via ethernet

**Deny access to this computer from the network
Here I can define users in the same workgroup or domain that I do not want accessing this computer...correct?



**Lan manager authentication level
This is here for backward compatibility with older OS's that do not support NTLM correct? What is the secure setting to set this to

Thanks
0
dissolved
Asked:
dissolved
  • 4
  • 2
1 Solution
 
Pete LongTechnical ConsultantCommented:
>>If deny access to "everyone", will it have an effect on applications that can communicate via ethernet

NEVER -EVER Deny Access to the everyone group - remember administrators are part of the everyone group :)
0
 
Pete LongTechnical ConsultantCommented:
>>with older OS's that do not support NTLM correct?

9x and NT and 2K support NTLM - 2K3 does NOT support NTLM out of the box you have to downgrade it
0
 
dissolvedAuthor Commented:
Interesting. I didnt know NTLM was not supported on 2k3 out of the box. What does 2k3 use instead of NTLM? Something more secure?
Thanks, giving you the question
0
Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

 
Pete LongTechnical ConsultantCommented:
>>What does 2k3 use instead of NTLM? Something more secure?

Kerberos - thats why to have NT4 or 9X on a 2K3 doamin you have to lower the authentication levels as these machines only understand NTLM

Remember When assigning permissions allways "Remove" groups never Deny Things - it makes it easier to track what the hell is going on when things break :)

Pete

0
 
dissolvedAuthor Commented:
so lanman and NTLM only apply to nt4  and 9x.  2k cant speak kerberos right?
0
 
Pete LongTechnical ConsultantCommented:
Yes
And
Yes
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now