| Author |
Message |
Death n Rebirth
Guest
|
 Posted:
Tue Jan 04, 2005 7:51 am Post subject:
Disabling 2003 Server SMB Signing lost ACL effectiveness |
|
|
I follow the below URL to disable the SMB Signing so
that Windows 95 workstations is able to access my
Win2003 server. It is however Win98/2000/XP clients
can access all the data shares even NTFS permission
deny their access. Please help.
http://support.microsoft.com/default.aspx?scid=kb;en-us;811497&FR=1&PA=1&SD=HSCH
Ian |
|
| Back to top |
|
 |
Steven L Umbach
Guest
|
| Posted:
Tue Jan 04, 2005 9:39 am Post subject:
Re: Disabling 2003 Server SMB Signing lost ACL effectiveness |
|
|
Exactly what is happening and what error messages are you getting from what
clients? Was this a direct result from changing digitally signing
communications setting? If so make sure that the options for "when possible"
are enabled in Domain Controller Security Policy. Also see the link below
which discusses lm/ntlm/ntlmv2 authentication in a Windows 2003 domain. ---
Steve
"Death n Rebirth" <photo@photo.photo> wrote in message
news:ucpIN$f8EHA.1524@TK2MSFTNGP09.phx.gbl...
|
|
| Back to top |
|
|
Roger Abell
Guest
|
| Posted:
Tue Jan 04, 2005 2:11 pm Post subject:
Re: Disabling 2003 Server SMB Signing lost ACL effectiveness |
|
|
What you are reporting really does not make sense nor
seem likely. The settings for the two things involved are
rather cleanly separate. How communications are handled
in the network stack does not have impact on how ACLs
authorizations are checked, and vice versa.
Are you sure that something else is not operative here ?
If you use that same account from an uplevel client do
you experience the same thing? Good - you have an uplevel
client, so now reverse the workaround setting you effected
and try it again with the same account from the uplevel client.
I am betting that you see no change and so by this would show
that something else is involved.
--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Death n Rebirth" <photo@photo.photo> wrote in message
news:ucpIN$f8EHA.1524@TK2MSFTNGP09.phx.gbl...
|
|
| Back to top |
|
|
Herb Martin
Guest
|
| Posted:
Wed Jan 05, 2005 1:40 pm Post subject:
Re: Disabling 2003 Server SMB Signing lost ACL effectiveness |
|
|
"Death n Rebirth" <photo@photo.photo> wrote in message
news:ucpIN$f8EHA.1524@TK2MSFTNGP09.phx.gbl...
| Quote: | I follow the below URL to disable the SMB Signing so
that Windows 95 workstations is able to access my
Win2003 server.
|
You might be better served [intended] by upgrading the
clients with the DSClient and making them SMB aware
but...
But if you have done this and still have permission problems
perhaps it is due to confusion (and a conflict) between
NTFS and Share permissions.
The user will need to authenticate, have Share access
sufficient, and also have NTFS access sufficient on the
file.
If the share is mapped, then it is not an SMB signing
issue.
What precise problem are you experiencing?
--
Herb Martin
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in