McAfee MANAGEMENT EDITION 2.5 Administrator's Manual page 230

Using Mirror and Linked Repositories
W
By default, the Management Console gives the built-in group EVERYONE
read access to REPO$ and full access to the MEUPGD$ share. The MEUPGD$
share contains no executable files, and the scripts are integrity checked before
they are executed on the client machine. This means that the scripts cannot
easily be tampered with. Also, these shares are created hidden (by default) so
that they cannot be enumerated. The following two sections apply only to this
default security setup. The last section gives details on how you can use a
group other than EVERYONE to manage access to the mirror repository.
Configuring access for machines that don't log on to a Windows
NT domain
Here are some things to keep in mind:
• After the user logs on, Windows will use the currently logged in username
to connect to the repository, and you must do one of the following:
a. Ensure the Guest account on the server is enabled.
b. Ensure that the server has a username that matches the name used to log
c. Ensure that the username and password pair that the user logged on
• If the user is not logged on to the workstation, the Update Agent will be
able to access the repository as Windows will not try and use the currently
logged-on user to connect to the machine (because there isn't one).
230 Management Edition
NOTE: To update Windows 95 and Windows 98 machines from a mirror
repository on a Windows NT machine, you must have the Client for
Microsoft Networks installed.
Windows will make the connection using the guest account. However,
keep in mind that enabling the Guest account has its own security issues.
on to the workstation and a password that matches the password in the
mirror configuration tab.
The agent will explicitly log on using the logged on users name and the
password entered in the mirror configuration tab.
with has a matching username and password pair on the server.
Windows will log on to the server with the username/password pair
entered when the user logged on to Windows.