security INF files

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I found "*S-1-5-32-547__Memberof=" and "*S-1-5-32-
547__Members ="in several INF files for securing your
servers. However, I cannot verify what they are for.

I assume this removes the power users from any group and
removes them from being memebers of any groups. Is there
a document or some place I can verify this?


SECOND,
What is "%SceInfGuests%__Members ="?

:Randy
 
That will remove all accounts from the power users group.

Lower down in the template you should see a Strings section where this is
defined: SceInfGuests = "Guests" The line you mentioned would remove all
accounts from the guests group.

N
 
Why would they do that instead of just calling
it "guest_members"?

Would it be safe then to assume that "*S-1-5-32-
547__Memberof=" will remove power users from every group
they are a member of?

Thanks again.

:Randy
 
Localization issues.

No, setting "XYZ__memberof=" won't search out all the groups that XYZ is a
member of and remove it. If there is a list of groups, the account will be
added to those groups. Then if you are running XP or WS2003 and you remove
a group from the memberof list, XYZ would be removed from the group so the
setting doesn't tattoo. That's the only scenario which would cause XYZ to
be removed from a group.

N
 
Back
Top