Ask the Expert

Inconsistent Values for the Registry and File System

Why are the "out-of-the-box" registry and file permissions for W2K Pro and Server different than any of the templates Microsoft provides? If you use Security and Configuration Analysis to compare settings right after W2K Pro installation to basicws.inf, setup security.inf, or defltwk.inf, there are a bunch of "Inconsistent Values" for the Registry and File System. The tool makes it almost impossible to specifically identify these inconsistencies.

Things to consider are if you are doing a "clean" install or if you are upgrading to Windows 2000 from a Windows NT machine. According to Microsoft, the default security settings for clean-installed workstations, servers, and domain controllers can be found in the following files respectively:
*defltwk.inf
*defltsv.inf
*defltdc.inf

In upgraded machines, the default Windows 2000 permissions for file system, registry and service objects are also applied to upgraded machines using the following files:
*dwup.inf
*dsup.inf
*dcup.inf (NT4 DC Upgrade Only)

So this means that when upgrading, an additional INF file is used and perhaps this is where you are seeing a discrepancy.

This was first published in June 2001

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: