Security With Win98 on an NT Server

[hfv]

We just moved from a Novell server to an NT 4.0 server with primarily NT workstations.  We have a few laptops that travel so have to have a network connection for them when in the office.  The laptops run Windows 98.  We have found that when a user logs into the domain from a workstation running 98, that user can "see" all directories even though that user does not have any persmissions to that directory.  Is this a known 98 issue?  Or are we missing setting some permissions or rights on the server possibly.

 

[fenris]

Can they access the directories? If they can then there is a problem. If they can only see them then don't worry about it because they won't be able to do any harm. you might want to check <A HREF="

http://www.microsoft.com"

TARGET="_new">

http://www.microsoft.com</A>

and see if they have a fix or something. <br><br>The problem with win98 it wasn't designed with a network in mind, whereas winNT was.<br><br> <p>Troy Williams B.Eng.<br><a href=mailto:fenris@hotmail.com>fenris@hotmail.com</a><br><a href= > </a><br>

 

[hfv]

Yes, the user can access the directories. As far as I can see, the permissions on the directories are set correctly. I will visit microsoft today and see if there is a &quot;fix&quot; for it. I was hoping one of you would already have the answer and save me some time. Thanks for responding. Any suggestions are welcome.<br><br>

 

[RachelD]

Have you tried logging on to an NT machine as one of your laptop users?&nbsp;&nbsp;Can you still open those directories?&nbsp;&nbsp;At least this will tell you whether the problem lies with your server permissions or your laptops themselves.<br><br>How are your sharings & permissions set up?&nbsp;&nbsp;Do you use profiles?&nbsp;&nbsp;Are users assigned to groups?&nbsp;&nbsp;I've networked a lot of Win98 machines on NT networks, but never run into this.&nbsp;&nbsp;First thing is to double-check your directory permissions (both sharing & NTFS).&nbsp;&nbsp;Did you assign rights to groups, or are you still using the default NT share permissions, which allow full access to everyone.&nbsp;&nbsp;(Different from Novell, where resources are locked down until you grant access - NT grants access by default & you have to take it away)<br><br>Check your users' memberships in groups (are they in an admin group, for example).&nbsp;&nbsp;Create a test group and user, and really lock down access to those directories for that group.&nbsp;&nbsp;You can start by setting NTFS permissions for test group as No Access.&nbsp;&nbsp;Start testing with the Win98 machine using the test group/user.<br><br>good luck<br><br>

 

[hfv]

Thanks for the input RachelD. Your suggestions were helpful.&nbsp;&nbsp;Strange thing, this particular user had never logged into the domain from an NT workstation, so we tried that and of course the permissions were set correctly.&nbsp;&nbsp;Then we logged him into the 98 machine and for some strange reason, he could no longer &quot;see&quot; all those directories. Whatever the problem was, that initial login to the domain from an NT machine cured it apparantly.<br><br>hfv