Monday, August 23, 2010

More For Windows 7 Sharing

I believe this is the GUI procedure for the previous post...

Please follow change the NTLM authentication level.
Network security: LAN Manager authentication level
To change the policy, open gpedit.msc from Start Search box, locate to:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network security: LAN Manager authentication level
Change the value to “Send LM & NTLM - use NTLMv2 session security if negotiated”.
If your system is Windows 7 Home Premium, you may change it from Registry.
1. Launch regedit from Start Search box.
2. Find the following branch.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3. Create a DWORD key under Lsa and set:
Name: LmCompatibilityLevel
Value: 1
4. Restart.

Monday, August 9, 2010

Win 7 Administrative Shares

Windows 7 still creates the administrative shares on install, but you can't use them out of the box. First of all, you need to have File and Printer Sharing enabled. And the way to do that has once again been changed:

  1. Open the control panel.
  2. Go to Network and Internet.
  3. Go to Network and Sharing Center.
  4. In the left column, click on Change advanced sharing settings.
  5. There are two profiles. You probably don't want this on when you're on a public network so open Home or Work.
  6. Under the header File and Printer sharing, select the Turn on... option.

And now your administrative shares still don't work :-P You've just completed step 1 which implies there's at least a step 2 and here it is: you also need to change the registry.

  1. Click on the orb (= the round button with the Windows logo in the taskbar) and type regedit in the search box.
  2. Open the registry editor.
  3. Navigate all the way toHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
  4. Right-click in the pane on the right side and add a new DWORD (32-bit).
  5. Give the new setting the name LocalAccountTokenFilterPolicy.
  6. Double click on that setting and give it a value of 1.

It's probably wise to reboot after doing this, although it might not be needed. I'm not sure if it works straight away because I rebooted without trying.

Anyways, if you're lucky you will be able to access administrative shares after performing these steps. If you're unlucky, like me, doing all these things appears to have zero effect at all. Once again don't panick, because there's another hint/tip/solution coming your way.

Somewhere at some point during the installation or configuration of Windows 7, you will be asked to do something with a thing called Homegroup. It's some weird new sharing tool that looks OK but isn't quite what you're used to. Once you have enabled that feature, you won't be able to use the administrative shares. So the tip is: disable the homegroup feature.

  1. Open the control panel.
  2. Go to Network and Internet.
  3. Go to HomeGroup.
  4. Click on the blue link Leave the homegroup.