diff --git a/winsup/cygwin/ChangeLog b/winsup/cygwin/ChangeLog
index e45e93d7d..989f9781b 100644
--- a/winsup/cygwin/ChangeLog
+++ b/winsup/cygwin/ChangeLog
@@ -1,3 +1,8 @@
+2002-07-25  Christopher Faylor  <cgf@redhat.com>
+
+	* security.cc (allow_ntsec): Default to on.
+	(allow_smbntsec): Default to off.
+
 2002-07-24  David MacMahon  <davidm@smartsc.com>
 
 	* times.cc (to_time_t): Always round time_t down to nearest second.
diff --git a/winsup/cygwin/security.cc b/winsup/cygwin/security.cc
index 1e9a860c2..a89ff2972 100644
--- a/winsup/cygwin/security.cc
+++ b/winsup/cygwin/security.cc
@@ -41,11 +41,11 @@ details. */
 #include "lm.h"
 
 extern BOOL allow_ntea;
-BOOL allow_ntsec;
+BOOL allow_ntsec = true;
 /* allow_smbntsec is handled exclusively in path.cc (path_conv::check).
    It's defined here because of it's strong relationship to allow_ntsec.
    The default is TRUE to reflect the old behaviour. */
-BOOL allow_smbntsec = TRUE;
+BOOL allow_smbntsec;
 
 extern "C" void
 cygwin_set_impersonation_token (const HANDLE hToken)