Consider the following scenario. You map a drive to a Windows XP-based computer from a Windows Vista-based computer. When you try to access the mapped drive from the Windows XP-based computer, you receive the following error message:
System error 5 has occurred.
Access is denied.
Access is denied.
This problem occurs if the following conditions are true:
* Both computers are members of a workgroup.
* You do not give the Full Control shared permission to the Everyone group.
* You give the Full Control shared permission to the Administrators group.
* You do not give the Full Control shared permission to the Everyone group.
* You give the Full Control shared permission to the Administrators group.
Note This access failure occurs regardless of the NTFS file system permissions that are assigned to the mapped drive.
To work around this problem, change the value of the LocalAccountTokenFilterPolicy registry entry on the Windows Vista-based computer so that full credentials can be passed between Windows Vista and Windows XP.
1. Click Start, type regedit in the Start Search box, and then click regedit.exe in the Programs list. If you are prompted for an administrator password, type your password. Or, if you are prompted for confirmation, click Continue.
2. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. If the LocalAccountTokenFilterPolicy registry entry does not exist, follow these steps:
* On the Edit menu, point to New, and then click DWORD Value.
* Type LocalAccountTokenFilterPolicy, and then press ENTER.
4. Right-click LocalAccountTokenFilterPolicy, and then click Modify.
5. In the Value data box, type 1, and then click OK.
6. Exit Registry Editor.
The LocalAccountTokenFilterPolicy registry entry in the registry can have a value of 0 or of 1. These values change the behavior of the registry entry as follows.
Collapse this tableExpand this table
Collapse this tableExpand this table
Value Description
0 This value builds a filtered token. This is the default value. The administrator credentials are removed.
1 This value builds an elevated token.
0 This value builds a filtered token. This is the default value. The administrator credentials are removed.
1 This value builds an elevated token.
No comments:
Post a Comment