How do I set User Right on Bypass traverse checking to 'Not Defined'?

Posted: 08-04-2008, 02:47 PM
Is it possible to set User Rights - Bypass Traverse Checking[BTC] to
Not Defined?

This User right is assigned by default to accounts: Everyone,
Administrators, Users, Backup Operators, Local Service, Network
Service

When I remove all accounts assigned this User Right[BTC] using
gpedit.msc, Windows Vista assigns Local Service & network Service
accounts, the user right- BTC.

Is it possible for a user to assign the UR, BTC to no accounts at all?

Does undefining a user right mean that no accounts are privileged to
use this user right?
Where do I find steps to undefine this User Right? [Appendix A:
Security Group Policy Settings recommends this setting as Not Defined]

How do I set User Right on Bypass traverse checking to 'Not Defined'?


Responses to "How do I set User Right on Bypass traverse checking to 'Not Defined'?"

Anthony [MVP]
Guest
Posts: n/a
 
Re: How do I set User Right on Bypass traverse checking to 'Not Defined'?
Posted: 08-04-2008, 05:34 PM
Trey,
I am not sure if I understand you correctly.
Undefined in Group Policy means that AD policies in the Group Policy
Management console do not override the Local Security Policy. So the Group
Policy for BTC rights would be Undefined, leaving the default Local Security
Policy that assigns the right to the the groups and accounts you mention.
So yes, in Group Policy you can leave the right undefined. In Local Security
Policy it will retain the default settings.
Changing the default Local Security Policy rights for BTC could create
mayhem, but perhaps you have a reason to do it?
Anthony,
http://www.airdesk.co.uk



<trey.jonn@gmail.com> wrote in message
news:c813c24f-c906-458c-b359-368cd45c0836@m73g2000hsh.googlegroups.com...
> Is it possible to set User Rights - Bypass Traverse Checking[BTC] to
> Not Defined?
>
> This User right is assigned by default to accounts: Everyone,
> Administrators, Users, Backup Operators, Local Service, Network
> Service
>
> When I remove all accounts assigned this User Right[BTC] using
> gpedit.msc, Windows Vista assigns Local Service & network Service
> accounts, the user right- BTC.
>
> Is it possible for a user to assign the UR, BTC to no accounts at all?
>
> Does undefining a user right mean that no accounts are privileged to
> use this user right?
> Where do I find steps to undefine this User Right? [Appendix A:
> Security Group Policy Settings recommends this setting as Not Defined]
>
trey.jonn@gmail.com
Guest
Posts: n/a
 
Re: How do I set User Right on Bypass traverse checking to 'NotDefined'?
Posted: 08-05-2008, 02:26 PM
I'm learning how the assignment of Bypass traverse checking[BTC] User
Right[UR] on Vista is different from other OSs like Win 2003.

The warning in gpedit.msc points to http://go.microsoft.com/fwlink/?LinkId=17925.
On browsing to that address, I get re-directed to http://support.microsoft.com/kb/823659

This article says that assigning BTC to no accounts is a risky
configuration, but the article applies to OSs other than Vista [it
seems logical that it also applies to Vista].
There is no change in working of BTC user right for Vista that i can
locate.
Why is Vista not included under OSs in 'Applies to' section? Is there
any site specific for User Rights working on Vista?

I want my Vista system to be secure to the greatest extent while being
connected to a domain.

Why does Vista assign the accounts: Local Service & Network Service,
the BTC UR, when I set the User right in gpedit.msc so that no
accounts are assigned the BTC UR?
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
User-defined sorting Dennis Snelgrove Windows Vista File Management 1 05-14-2007 07:05 AM
User defined page size Betsy Windows XP Printers / Scanners / Fax 1 09-09-2004 11:53 PM
user defined papersize under XP Cari \(MS-MVP\) Windows XP Printers / Scanners / Fax 0 05-18-2004 06:14 PM
User Defined Paper Size Cari \(MS-MVP\) Windows XP Printers / Scanners / Fax 14 04-11-2004 04:23 PM
user defined printing Rob Windows XP Printers / Scanners / Fax 7 10-23-2003 07:11 PM