+ Post New Thread
Results 1 to 10 of 10
Windows Thread, Helpful information for you all. in Technical; Thanks for the link Ric. This all started last week when working on Rics' network and trying to brink Sophos ...
  1. #1

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,855
    Thank Post
    583
    Thanked 2,162 Times in 987 Posts
    Blog Entries
    23
    Rep Power
    627

    Helpful information for you all.

    Thanks for the link Ric.
    This all started last week when working on Rics' network and trying to brink Sophos up to date. Many clients were not updating correctly, or at all and an error message about simple file sharing kept appearing. The following article should be read by all I think and make our lives a better place.

    http://mcpmag.com/columns/article.asp?EditorialsID=1049

    This tip is part 1 in a series of 5 on living with Windows XP Service Pack 2.

    Windows XP SP2 is undoubtedly a great upgrade to WinXP, but it does introduce a few complications in any environment. Reader Aaron Spurlock writes in with this issue:

    "It appears that WinXP SP2 turns simple file sharing back on for all computers, including those in a domain environment. It has caused me to rip my hair out several times wondering why I can't push anti-virus updates, why group policies aren't functioning, and why I cannot remotely administer computers."

    After some back-and-forth and some virtual machine-based testing, we determined that adding XP to a domain turns Simple File Sharing (SFS) off, as it should; adding SP2 left SFS off. Just adding SP2 left SFS in its default state of on, and joining to the domain turned SFS off. Perfect. However, one of Aaron’s clients had just installed a computer from SP2-slipstreamed media and joined the computer to the domain—and SFS was left on. Weird.

    Aaron’s solution was to deploy a batch file logon script that imports a registry file. Here’s the file he used:

    REGEDIT4

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa]
    "forceguest"=dword:00000000

    Ironically, you can control this setting from within a Group Policy object (GPO), but with SFS turned on, GPOs can’t download and apply properly. Oh, well. If you’ve got more insight on the SFS on-or-off problem, drop me a line at don@scriptinganswers.com. In the meantime, hopefully Aaron’s reg hack will help anyone who’s been dealing with this.

  2. #2
    Rozzer's Avatar
    Join Date
    Aug 2005
    Location
    South West
    Posts
    720
    Thank Post
    21
    Thanked 81 Times in 61 Posts
    Rep Power
    33

    Re: Helpful information for you all.

    I have always disabled the firewall that has sorted a lot of my sophos deployment and update issues.

    Ross

  3. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,855
    Thank Post
    583
    Thanked 2,162 Times in 987 Posts
    Blog Entries
    23
    Rep Power
    627

    Re: Helpful information for you all.

    I always disable the Windows firewall on my LAN via GPO. With all of the edcational software we use it causes no end of problems having it enabled.

  4. #4
    marco84's Avatar
    Join Date
    Jul 2005
    Location
    Manchester
    Posts
    146
    Thank Post
    4
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Helpful information for you all.

    Does anyone have an idea of where i can turn SFS off in Group Policy??

  5. #5

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: Helpful information for you all.

    Quote Originally Posted by marco84
    Does anyone have an idea of where i can turn SFS off in Group Policy??
    I could not find the GPO setting (even using the MS spreadsheet) but the regedit can be added to a startup script using the command
    Code:
    regedt32 /S <filename.reg>
    (don't have time to link to other post regarding this).

  6. #6
    marco84's Avatar
    Join Date
    Jul 2005
    Location
    Manchester
    Posts
    146
    Thank Post
    4
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Helpful information for you all.

    Cheers ric

  7. #7

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,855
    Thank Post
    583
    Thanked 2,162 Times in 987 Posts
    Blog Entries
    23
    Rep Power
    627

    Re: Helpful information for you all.

    From the LancsNGfL forum.

    Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

    Set as 'Classic: local users authenticate as themselves'

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Helpful information for you all.

    However, setting that in the GPO wont help if the machines are not loading the GPO settings correctly (one of the many problems SFS will cause). By all means set the GPO setting but if you have actively broken machines you'll have to do the registry fix in the login scripts too.

  9. #9

    Join Date
    Aug 2005
    Location
    Birmingham, UK
    Posts
    490
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Helpful information for you all.

    Interestingly enough, i have not come across this problem, but all of my machines are RISed from an image with XP SP2 slipstreamed...

  10. #10
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 44 Times in 34 Posts
    Rep Power
    29

    Re: Helpful information for you all.

    I agree E1uSiV3 - not using RIS but the xp ua cd i made has sp2 slipstreamed and unless I've inadvertantly disabled it in the winnt.sif file, I havent had any probs with this either.

    Regards
    N.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 2nd June 2008, 01:39 PM
  2. Altering music information
    By FN-GM in forum General Chat
    Replies: 4
    Last Post: 27th December 2007, 10:47 PM
  3. TV Information System
    By BKGarry in forum How do you do....it?
    Replies: 7
    Last Post: 17th October 2007, 05:30 PM
  4. A nugget of ISA information
    By Ric_ in forum Wireless Networks
    Replies: 0
    Last Post: 31st July 2007, 08:19 AM
  5. Information Age magazine
    By OverWorked in forum General Chat
    Replies: 2
    Last Post: 9th March 2006, 10:34 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •