When connecting to another Windows XP or Vista computer some non-default security
options need to be set on the traget computers, or Access Boss may return the
message "Access is denied".
If the target computer is a workgroup computer rather than a domain, then the
default setting for remote log in is 'guest', which is enough security level
to access logon time settings.
How to fix the problem.
Under 'Control Panels > Administrative Tools > Local Security Policy
> Security Options > Network access: Sharing and security model for local
accounts', change 'Guest Only - Local users authenticate as guest' to 'Classic
- Local users authenticate as themselves'.
Here are the step-by-step instructions:
1. Log on to the target Windows computer with Administrator rights.
2 Click Start and select Control Panel.
3. Make sure that the Control Panel displays its icon in Classic View ( To switch
Control Panel from Category view to classic view you should click Switch
to Classic View on the left part of Control Panel window)
4. Double click the Administrative Tools icon.
5. In the Administrative Tools window, double click Local Security Policy.
6. In the Local Security Settings window, in the left-hand window, double click
Local Policies then click Security Options.
7. In the right-hand window, double click Network Access: Sharing and security
model for local accounts.
8. In the dialog box, select option to Classic local users authenticate
as themselves.
9. Click OK button
Note. With clasic security model your users should not have blank
passwords because it will be possible to crack into the workstation by unauthorized
persons. If your users will have blank passwords anyway double click Accounts:
Limit local account use of blank passwords to console logon only. In the
dialog box, select option to Disabled.
Repeat this procedure on each Windows computer in the workgroup.
Remote Registry
By default Remote Registry is inaccessible. The Remote Registry service is
set to manual start instead of automatic.
To fix the problem:
1. Click Start and then Run.
2. Type services.msc in Run dialog and press OK. The Services
applet will start.
3. Browse for Remote Registry and double click on it.
4. Change the Startup type to Automatic and press Apply.
5. Click Start to make sure that the service runs.
6. Press OK to close the dialog, then close Services applet.
Remote UAC
By default Windows Vista is protected by User Account Control (UAC). If you
run an interactive process that requires an administrative privileges, Vista
displays UAC prompt to continue.
However Vista UAC blocks the remote connections that require administrative
permissions.
There are 2 ways to fix the problem:
1. Disable Remote UAC.
With registry editor (regedit.exe) browse to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\LocalAccountTokenFilterPolicy.
Set the DWORD entry to 1 - remote connections to this computer will be allowed
2. Enable Administrator account and logon with Administrator credentials.
In Windows Vista Administrator account is disabed by default. You can enable
it with Windows Vista Accounts Manager or from Access Boss (Object->Properties).
Then, when you connect the remote PC you should logon as Administrator either
explicitly (specifying logon name and password in Connect to... dialog) or implicitly
(if you logged on as Administrator to your local PC).
|