Vista - SECPOL.MSC question

hgj1357
05.27.2009 at 10:24AM CDT, ID: 24484131
On Vista run secpol.msc. Look for Local Policies > Security Options>Network Security: LAN Manager authentication level. Change it to "Send LM & NTLM - use NTLMv2 session security if negotiated". That will make your Vista work with Samba

How do I do this if I don't have SECPOL.MSC?

Thanks
LVL 2
hgj1357Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

random_ruCommented:
You should have secpol.msc, however, if that fails, run gpedit.msc from Run. The screenshot below shows the difference (gpedit includes the secpol):

Otherwise, run mmc from Run, File>Add/Remove Snap-In and add those tools from the list. Good Luck!
gpedit-secpol-difference.png
0
hgj1357Author Commented:
I was under the impression Vista business included these snap-ins, but Vista home did not. I can run MMC

What are these snap-ins called in the MMC list?
0
random_ruCommented:
Group Policy (gpedit) and Local Security Settings (secpol)
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

hgj1357Author Commented:
I don't have those. This is Vista Home Premium
0
random_ruCommented:
You can use Resultant Set of Policy (RSoP) snap-in to view the policies applied in the local workstation.
To start the RSoP snap-in, please click Start, click Run, type rsop.msc in the Open box, and then click OK. Please verify if it meets your demands.
If the network administrator defined the corresponding group policy on domain under User configurations->Administrative templates->Control panel, you may not modify this due to non-enough permissions.
0
rionrocCommented:
Hello

Type and find at regedit:
Send LM & NTLM

When it finds: you will see [ValueType] at the bottom, change it to 1


Cheers!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
hgj1357Author Commented:
I am unable to run RSOP, either as rsop.mmc or adding it in to the console
0
rionrocCommented:
Ok

find at regedit and type:
lmcompatibilitylevel

change the value date FROM  0 TO  1

press f3 to find another lmcompatibilitylevel

until finishes to search

close regedit

restart computer

Cheers!
0
hgj1357Author Commented:
Current value is 3. This is vista.
0
rionrocCommented:
Change it to 1

3 is Send NTLMv2 responce only
1 is Send LM & NTLM - use NTLMv2 session security if negotiated   (just the way you want the value is)

0
rionrocCommented:
restart
0
rionrocCommented:
Hello

How's it going?  It should change!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Vista

From novice to tech pro — start learning today.