Clearapps network inventory
software.

Security

Access is denied
Account is not authorized to log in from this station
Accounts being locked
Administrator can't access ADUC
Administrator can't edit folder permissions
Administrator read-only on Program Files folder
C:\Users\All Users\Start Menu - Access Denied
Solved: Can't delete a file in Windows FTP
Can't edit data even administrator
Can't enable guest account
Can ping but browse because of security software
Cannot add a new local user
Cannot join the domain because of Norton Security
Certificate Services Troubleshooting
configure Group Policy display different wallpapers
Connectivity issue because of security software
Due to an unidentified problem, windows cannot display windows firewall settings
Error 0x80070570 file or directory is corrupted & unreadable
"H:\shared is no accessible. Access is denied"
How Inheritance Affects File and Folder Permissions
How to access Domain Console without logon the domain
How to check the group policy settings and result
How to change the password policy
How to manage inherited permissions
How to protect my computer without buying hardware or software firewall
I can save a new file but can’t modify an existing file
Logon script doesn't work
One user can't make share, see the shared sign
"Not accessible. You may not have permission to use this network resource"
Problem with users without local administrator right
Robocopy on Windows 2008 SP2 does not copy folder permission
Some Security Permissions do not copy
The password does not meet the password policy requirement
The following entry in the [strings] section is too long and has been truncated
The following entry in the [string] section is too long and has truncated - Case Study
The security settings to managing XP Firewall
The Sharing tab is not visible
Understand Allow and Deny permissions
User credentials have expired
user has not been granted requested logon type
Users can only have the permissions to edit some subsites
You are unable to delete a folder in a folder tree
You only have permission to view the current security information
"You do not have permission to view or edit the current permission setting for the sharename"
You might not have permission to use this network resource
You might not have permission to use network resource
Windows UAC issues
Windows XP cannot remove the passwords
Why can't I have permission button while setup sharing on XP
Why do I get \S-1-51-xxxxx as a user/group name
Windows admin can’t delete some folders
Windows Logon Types
Windows XP Firewall options are grayed out

Can't enable guest account

To enable guest account on w2k/xp, you must logon as administrator.

Cannot add a new local user

Cause: you are using domain credentials to add a new user on a computer that doesn’t connect to the domain.

For the consultants, refer to case 101404SO

How Inheritance Affects File and Folder Permissions

After you set permissions on a parent folder, new files and subfolders that are created in the folder inherit these permissions. If you do not want the files and folders to inherit permissions, click This folder only in the Apply onto box when you set up special permissions for the parent folder. If you want to prevent only certain files or subfolders from inheriting permissions, right-click the file or subfolder, click Properties, click the Security tab, click Advanced, and then click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box.

If the check boxes are not available, the file or folder has inherited permissions from the parent folder. There are three ways to make changes to inherited permissions:

Make the changes to the parent folder so that the file or folder inherits the permissions.
Click to select the opposite permission (Allow or Deny) to override the inherited permission.
Click to clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box. When you do this, you can make changes to the permissions or remove the user or group from the permissions list. However, the file or folder does not inherit permissions from the parent folder.

How to access Domain Console without logon the domain

Sample issue: I have group policy that is locking down the computer for ALL User, Even the administrator. Now I cant access the domain network from any computers

Solution: Logon as the administrator with the same password of the domain administrator. Then access the AD Users and Computers-Connected to the domain controller. Moved the admin accounts up to the Users OU.

How to check the group policy settings and result

You can use gpresult.exe which displays the resulting set of policies that were forced on the client for the specified user at logon.1.

How to manage inherited permissions

By default, Everyone has Full Control for a NTFS folder and the permission is inherited from the root folder on the partition or volume. To block Permissions Inheritance, click to clear the Allow inheritable permissions from parent to propagate to this object check box.

How to change the password policy

For local computer, go to Local Computer Policy>Computer Configuration>Windows Settings>Security Settings>Account Policies>Password Policy. For domain controller, go to Default Domain Security Setting>Security Settings>Account Policies>Password Policy.

How to protect my computer without buying hardware or software firewall

1. Enable ICF if you have XP or 2003.
2. Enable TCP/IP Security.
3. Enable IPSec Policies.
4. Enable RRAS Packet Filters.

Logon script doesn't work

Symptoms: the logon script doesn't run when some users logon.

Resolutions: 1. Everyone doesn't have read right to C:\%rootsystem%\system32\repl\script\import.
2. Also check the netlogon under My Computer Manage.

One user can't make share, see the shared sign

Symptoms: 1. Can't make share folders on your local computer;
2. Can't see shared sign on your local computer;
3. Net share gets "Access denied"

Cause: you don't have permission.

The security settings to managing XP Firewall

Go to Local Computer Policy\Computer Configurations\Admin Templates\Network\Network Connections\Internet Connection Firewall.

Not accessible. You may not have permission to use this network resource

Symptom: Your WinXP, in a peer-to-peer mixed network, may receive the following error when you double-click My Network Places/Computers Near Me: <Workgroup Name> is not accessible. You may not have permission to use this network resource.

Resolution: 1) Enable NetBIOS over TCP/IP on one or more computers in the workgroup. To do that, go to properties of Local Area Connection>properties of Internet Protocol (TCP/IP)>General> Advanced>WINS, check Enable NetBIOS over TCP/IP (If you have a DHCP-assigned IP address, select Use NetBIOS setting from the DHCP server ). 2) Make sure the Computer Browser service is started.

The password does not meet the password policy requirement

Symptoms: when attempting to create a new account with a password or change the password on 2003 server and the member of computers, you may receive this messages "Windows cannot complete the password change. The password does not meet the password policy requirement. Check the minimum password length, password complexity and password history requirement".

Cause: The default minimum password length is 7 and the password must meet complexity requirement on 2003 domain controller. By default, member of computers follow the password configuration of the their domain controller.

The Sharing tab is not visible

The sharing tab is not visible if you are logged on to a machine with an account that does not have adequate rights.

Understand Allow and Deny permissions

A: 1) Allow permissions are cumulative, so a user's permissions are determined by the cumulative effect of all of the groups to which the user belongs. 2) Deny permissions override Allow permissions. Use caution when you apply Deny permissions.

Why can't I have permission button while setup sharing on XP

The reason you can't see the permission is because the XP simple file sharing is enabled. To disable simple file sharing, go to windows explorer>tools>folder options>view, uncheck use simple file sharing. Just remember that, after disabling simple file sharing, some users may have
difficulty to access the sharing folders.

Why do I get \S-1-51-xxxxx as a user/group name

Symptoms: 1. When check the member of a group, it takes long time to open and you may see one or some members are listed as \S-1-51xxxx. 2. When checking the Security of a file or folder, you may see one or more user/groups are listed as \S-1-51-xxxx.

Causes: The workgroup or domain that the users, groups or members are belong to is offline