Anonymous_User Absent Member.
Absent Member.
3406 views

Simple File Sharing - Windows XP Pro

In the documentation, it says to disable Simple File Sharing. Why?

I've looked in group policy, but can't find a setting to use to turn
it
off on all my computers. Any ideas on the best way to turn off SFS
without touching every computer?

--




Labels (2)
0 Likes
5 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Simple File Sharing - Windows XP Pro

> I've looked in group policy, but can't find a setting to use to turn
it
> off on all my computers.


It's setting 117 on the "Security Settings WinXP; WS2003" tab in the
Reference:
http://www.microsoft.com/downloads/details.aspx?FamilyID=7821C32F-DA15-438D-8E48-45915CD2BC14&displaylang=en


MMC -> Computer Configuration
-> Windows Settings -> Security Settings
-> Local Policies -> Security Options
-> "Network Access: Sharing and security model for local accounts"
-> "Classic - local users authenticate as themselves"

Regards
Rolf Lidvall
Swedish Radio (Ltd)





0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Simple File Sharing - Windows XP Pro

It needs to be disabled because if not, then push deployment of the
agent fails.
It's off by default in a Domain Environment.

The SFS is controlled by a registry key :
HKLM\System\CurrentControlSet\Control\LSA\ForceGuest
Set it to 0x0 to disable SFS

It's not in the GPO unfortunately, but man can write an ADM to set it.

See what's done in the cool solution to configure Novell Client that gives exemple of ADM dealing with registry.

Michael Stewart wrote:
> In the documentation, it says to disable Simple File Sharing. Why? >
> I've looked in group policy, but can't find a setting to use to turn

it
> off on all my computers. Any ideas on the best way to turn off SFS
> without touching every computer?
>




0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Simple File Sharing - Windows XP Pro

> The SFS is controlled by a registry key :
> HKLM\System\CurrentControlSet\Control\LSA\ForceGuest
> Set it to 0x0 to disable SFS
>
> It's not in the GPO unfortunately,


Yes it is. See my previous post.
If you check the Reference you will see that exactly that registry
entry is
related to that setting.

Regards
Rolf Lidvall
Swedish Radio (Ltd)





0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Simple File Sharing - Windows XP Pro

Oups ...
I saw your post just after posting mine.

Rolf Lidvall wrote:
>> The SFS is controlled by a registry key :
>> HKLM\System\CurrentControlSet\Control\LSA\ForceGuest
>> Set it to 0x0 to disable SFS
>>
>> It's not in the GPO unfortunately,

>
> Yes it is. See my previous post.
> If you check the Reference you will see that exactly that registry

entry is
> related to that setting.
>
> Regards
> Rolf Lidvall
> Swedish Radio (Ltd)
>
>




0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Simple File Sharing - Windows XP Pro

Michael,

> disable Simple File Sharing. Why?
>

without that, there's no access to the remote ADMIN$ share

--

Shaun Pond





0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.