RE: XP admin shares

2002-12-11 Thread Schuler, Jeff
It's a somewhat little-known (though probably well known around here) fact that renaming the administrator account only buys you a limited increase in security. The administrator RID (relative ID) is ALWAYS 500. Even if you rename it, by enumerating the SID for the Domain Users group and then chan

RE: How to authentificate an user via telephon?

2002-12-05 Thread Schuler, Jeff
That works in a small environment but not in an enterprise setting where you may have hd staff who have never met many of the users. As part of the initial user setup we have each user pick a question and provide the answer for it. That goes into our call tracking system and only the HD staff can

RE: Network Address Translation insecurities

2002-09-26 Thread Schuler, Jeff
-Original Message- From: Kline, Nathan C - CICT-2 [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 25, 2002 1:47 PM To: 'Schuler, Jeff'; [EMAIL PROTECTED] Subject: RE: Network Address Translation insecurities How about the fact that an attack can come from inside your firewall? You

Network Address Translation insecurities

2002-09-25 Thread Schuler, Jeff
I am looking for information regarding the insecurities and vulnerabilities that exist in Network Address Translation. One of our admins feels that because everything is NAT'd that there is no way anyone can break into the systems that are NAT'd. I know that this is not a completely accurate sta