How to manage inherited
By default, Everyone has Full Control for a NTFS folder and the permission
is inherited from the root folder on the partition or volume. To block
Permissions Inheritance, click to clear the Allow
inheritable permissions from parent to propagate to this object
change the password policy
For local computer, go to Local Computer Policy>Computer
Configuration>Windows Settings>Security Settings>Account Policies>Password
Policy. For domain controller, go to Default Domain Security Setting>Security
Settings>Account Policies>Password Policy.
How to protect my computer without buying hardware or software firewall
1. Enable ICF if you have XP or 2003.
2. Enable TCP/IP Security.
3. Enable IPSec Policies.
4. Enable RRAS Packet Filters.
Symptoms: the logon script doesn't run when some users logon.
Resolutions: 1. Everyone doesn't have read right to
2. Also check the netlogon under My Computer Manage.
One user can't make
share, see the shared sign
Symptoms: 1. Can't make share folders on your local computer;
2. Can't see shared sign on your local computer;
3. Net share gets "Access denied"
Cause: you don't have permission.
security settings to managing XP Firewall
Go to Local Computer
Policy\Computer Configurations\Admin Templates\Network\Network
Connections\Internet Connection Firewall.
Not accessible. You may not have permission to use this
Symptom: Your WinXP, in a peer-to-peer
mixed network, may receive the following error when you double-click
My Network Places/Computers Near Me:
<Workgroup Name> is not accessible. You may not have permission to use this
Resolution: 1) Enable NetBIOS over
TCP/IP on one or more computers in the workgroup. To do that, go to
properties of Local Area Connection>properties of Internet Protocol
(TCP/IP)>General> Advanced>WINS, check Enable NetBIOS
over TCP/IP (If you have a DHCP-assigned IP address, select Use
NetBIOS setting from the DHCP server ). 2) Make sure the Computer Browser
service is started.
password does not meet the password policy requirement
Symptoms: when attempting to create a new
account with a password or change the password on 2003 server and the member
of computers, you may receive this messages "Windows cannot complete the
password change. The password does not meet the password policy requirement.
Check the minimum password length, password complexity and password history
Cause: The default minimum password length is 7
and the password must meet complexity requirement on 2003 domain controller.
By default, member of computers follow the password configuration of the their
The sharing tab is not
visible if you are logged on to a machine with an account that does not have
Understand Allow and Deny
Allow permissions are cumulative, so a user's
permissions are determined by the cumulative effect of all of the groups to
which the user belongs. 2) Deny permissions override
Allow permissions. Use caution when you apply Deny
can't I have permission button while setup sharing on XP
The reason you can't see the permission is because the XP simple file
sharing is enabled. To disable simple file sharing, go to windows
explorer>tools>folder options>view, uncheck use simple file sharing. Just
remember that, after disabling simple file sharing, some users may have
difficulty to access the sharing folders.
Why do I get
\S-1-51-xxxxx as a user/group name
Symptoms: 1. When check the member of a group, it takes long time to open
and you may see one or some members are listed as \S-1-51xxxx. 2. When
checking the Security of a file or folder, you may see one or more user/groups
are listed as \S-1-51-xxxx.
Causes: The workgroup or domain that the users, groups or members are
belong to is offline