flexible security products for home and business

Important notice for network users

When connecting to another Windows XP or Vista computer some non-default security options need to be set on the traget computers, or Access Boss may return the message "Access is denied".

Windows XP and Vista networking issues

If the target computer is a workgroup computer rather than a domain, then the default setting for remote log in is 'guest', which is enough security level to access logon time settings.

How to fix the problem.

Under 'Control Panels > Administrative Tools > Local Security Policy > Security Options > Network access: Sharing and security model for local accounts', change 'Guest Only - Local users authenticate as guest' to 'Classic - Local users authenticate as themselves'.

Here are the step-by-step instructions:

1. Log on to the target Windows computer with Administrator rights.
2 Click Start and select Control Panel.
3. Make sure that the Control Panel displays its icon in Classic View ( To switch Control Panel from Category view to classic view you should click Switch to Classic View on the left part of Control Panel window)
4. Double click the Administrative Tools icon.
5. In the Administrative Tools window, double click Local Security Policy.
6. In the Local Security Settings window, in the left-hand window, double click Local Policies then click Security Options.
7. In the right-hand window, double click Network Access: Sharing and security model for local accounts.
8. In the dialog box, select option to Classic – local users authenticate as themselves.
9. Click OK button

Note. With clasic security model your users should not have blank passwords because it will be possible to crack into the workstation by unauthorized persons. If your users will have blank passwords anyway double click Accounts: Limit local account use of blank passwords to console logon only. In the dialog box, select option to Disabled.

Repeat this procedure on each Windows computer in the workgroup.

Windows Vista networking issues

Remote Registry

By default Remote Registry is inaccessible. The Remote Registry service is set to manual start instead of automatic.

To fix the problem:

1. Click Start and then Run.
2. Type services.msc in Run dialog and press OK. The Services applet will start.
3. Browse for Remote Registry and double click on it.
4. Change the Startup type to Automatic and press Apply.
5. Click Start to make sure that the service runs.
6. Press OK to close the dialog, then close Services applet.

Remote UAC

By default Windows Vista is protected by User Account Control (UAC). If you run an interactive process that requires an administrative privileges, Vista displays UAC prompt to continue.

However Vista UAC blocks the remote connections that require administrative permissions.

There are 2 ways to fix the problem:

1. Disable Remote UAC.

With registry editor (regedit.exe) browse to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\LocalAccountTokenFilterPolicy.

Set the DWORD entry to 1 - remote connections to this computer will be allowed

2. Enable Administrator account and logon with Administrator credentials.

In Windows Vista Administrator account is disabed by default. You can enable it with Windows Vista Accounts Manager or from Access Boss (Object->Properties).

Then, when you connect the remote PC you should logon as Administrator either explicitly (specifying logon name and password in Connect to... dialog) or implicitly (if you logged on as Administrator to your local PC).