Blog Archives

Windows 8.1: A service pack or a new OS?

Is Windows 8.1 an update for Windows 8 or an upgrade? In other words, is it a service pack or is it a new version of Windows?

Windows 8.0 in comparison to Windows 8.1.

Windows 8.0 in comparison to Windows 8.1.

Let’s find out.

Read the rest of this entry

Advertisements

Inside Windows 8.1: File and printer sharing protocol

While browsing Windows Features applet in Windows 8.1 Preview’s Control Panel, a new “feature” caught my attention: SMB 1.0/CIFS File Sharing Support. For those who know what it is, it bears a very clear message. Those who do not, however, might want to read on and find out.

A dialog box whose title reads "Windows Features". List a lot of items, including "SMB 1.0/CIFS File Sharing Support"

Windows 8.1 Preview – Features applet contains SMB 1.0/CIFS File Sharing Support


Read the rest of this entry

Inside Windows 8.1: Compatibility

This is the fifth article in my series of articles on Windows 8.1 Preview, but this one is short.

Yesterday, I decided that I needed a DaRT recovery disc (DaRT stands for Data Recovery Toolset) so I grabbed the nearest copy of Microsoft Desktop Optimization Toolkit (MDOP). What came into my hand was MDOP 2012. But as I ran the setup program, I was stopped cold: An error message said that the copy of DaRT  needed Windows 8 or Windows Server 2012. But I was running it on Windows 8, wasn’t I?

Installer information: Microsoft DaRT 8.0 requires that your computer is running Windows 8 or Windows Server 2012. Windows 8.1 Pro Preview. Evaluation copy. Build 9431

MDOP 2012 which requires Windows 8 does not run on Windows 8.1 Preview

Yes, and no. I was running it on Windows 8.1 Preview, to be accurate. Let me remind you guys: Windows Vista’s version number (regardless of whatever service pack you install on it) is 6.0. Windows 7’s version number is 6.1. Windows 8’s version number is 6.2. Windows 8.1, however, would change the version number to 6.3, effectively telling every single app that you are running a version of Windows significantly different from Window 8.0.

Net result: With Windows 8.1, Microsoft has brought you the Start button that you wanted… along with a potential application compatibility nightmare. I’ll go find myself either a Windows 8 PC or a copy of MDOP 2013, whichever is the nearest.

The Importance of Simple File Sharing – Part Two

Screenshot of Folder Options dialog box, showing how Simple File Sharing in Windows XP Professional is enabled or disabled

Screenshot of Folder Options dialog box, showing how Simple File Sharing in Windows XP Professional is enabled or disabled

In my previous post, I emphatically advised all administrators who have Windows XP computers in their list of responsibilities to to study Microsoft Support article 304040. As the support article suggests, Simple File Sharing strategically changes Windows XP mode of operation. The most important changes include:

  1. Properties dialog box: When Simple File Sharing is enabled, a simplified Sharing tab is used to manage both NTFS permissions (NTFS ACLs) and File Sharing permissions (SMB/CIFS ACLs) in a simplified manner. File and folder permissions (DACL) and audit rules (SACL) are not available.
  2. File and folder permissions: With Simple File Sharing on, Windows Explorer no longer retains file and folder permissions  when files and folders are moved around an NTFS volume. Traditionally, files retained even their inherited NTFS permissions when they were moved within the volume. This simple behavior is suitable for home computers when family members want to quickly exchange files. The classic behavior is an invaluable jewel for enterprise managers, where security is so important that ease of use is often sacrificed. This change, however, only affects Windows Shell. Other programs which do not use Windows Shell API continue to retain file and folder permissions regardless of Simple File Sharing configuration.
  3. Authentication: With Simple File Sharing active, Net Logon service no longer tries to authenticate network users: Every connection is admitted in context of the Guest user account. As a result:
    1. Neither managers nor attackers shutdown the computer remotely via standard Windows API.
    2. Remote access to file system, memory objects (via CIFS/SMB protocols) and registry (via Remote Registry service) is restricted to that of a Guest (which is very limited indeed.)
    3. Remote software installation via ActiveDirectory and Windows Installer is impossible, although joining a Windows XP Professional computer to a domain will cause Simple File Sharing to be disabled.
    4. Access to services, drivers, WMI and Microsoft Management Console is very limited.

Simple File Sharing is a local machine setting. Only administrators can turn it on or off, and when turned on or off, it affects any operation under any user account on the same machine. This setting is permanently enabled in Windows XP Home Edition and cannot be disabled.

%d bloggers like this: