Ignore, Ive managed to get through to one of the other admins. Some of the settings needed changing, first and most importantly deny access to this computer from network was set to Everyone!!!!
Changed to guests/support_... and all looking much rosier. -----Original Message----- From: Adamson,D,David,JPGA4Y C Sent: Thursday, November 24, 2005 1:15 PM To: [email protected] Subject: Windows XP Security Guide - Laptop Policy I have an environment that I have set up for a customer using the Windows 2003 Security Guide and enterprise policy settings. This is all fine, I have also implemented the enterprise security policies from the Windows XP security guide. I have set up both the enterprise desktop policy and also the enterprise laptop policies + the environment specific and local account changes. I have been getting calls from the administrator saying they are unable to do a few things on the Laptops: 1. Remotely manage them properly from another desktop/laptop/server ie. Red X in users and groups, access denied on services, eventvwr etc 2. The main one - They are unable to offer assistance to Laptops, they offer to any of the desktops without issues. The firewall exceptions are all correct, even with the firewall disabled we still get permission denied instantly. The remote is enabled on the machine and also via group policy with the correct group populated. It seems to be a security difference between the desktop and laptop policy in the security guide that is causing offer assistance to fail but not on site and so cant really have a good look. They are able to RDP into the Laptops though? Any help, direction would be greatly appreciated. Rgds Dave Adamson ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- ---------------------------------------------------------------------------
