|
Posted by Rupesh on August 7, 2006, 11:26 am
Please log in for more thread options Hi Roger,
Thanks for the reply.
This setting: "Network Access: Allow anonymous SID/Name translation" is
newly added in Windows XP and Windows 2003 and as you rightly said
there is no public interface, function available to access this
setting.
I tried using sceregvl.inf file and other options you specified, but it
did not work for me.
Is there any other workaround or other way to get this setting? If
not, I'm curious to know how Microsoft reads\writes this information.
I've workaround and I'm trying to verify this. Please see if it makes
sense to you.
- Since this setting is related to "Anonymous SID/Name translation", I
(in the code) impersonate caller anonymously and execute
"LookpAccountSid" on target machine with NTAuthorityLocalSystem SID
("S-1-5-18") and see if this API works or fails.
If API work --> means the resgistry setting is "Enabled"
If API fails --> means the registry setting is "Disabled"
I did get the expected result on Windows2003 but not on Windows XP. I'm
trying to find the reason. Lets see.
Please let me know if you know any solution for this.
Thanks a lot.
Regards,
Rupesh
Roger Abell [MVP] wrote:
> There is not public interface, scriptable or not, for doing so.
> Some things can be accessed with older APIs from C++, for
> example the User Rights.
> If you are only after one or a few settings, then read in the
> sceregvl.inf file and find the targetted reg value and read that.
> However, be aware that setting that value will not change
> what policy tries to make it become, and what you set will
> get wiped out as soon as any policy (local or GPO) defines
> that setting.
>
> > Hi,
> >
> > I am NOT finding a way to access Local Security Policy settings
> > programatically.
> >
> > The Local Security Policy setting which I'm trying to access is:
> > "Network Access: Allow anonymous SID/Name translation"
> >
> > Does anybody have an idea about accessing this settting
> > programmatically?
> >
> > Regards,
> > Rupesh
> >
|