:00
To: dave; 'ParisStone'; 'stephen at unix dot za dot net'
Cc: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
Cut-n-Paste of my original post:
~snip~
Can't delete Administrator or Guest. RENAME DISABLE
:Disabling is easy and definitely a preferred configuration
:option. I've done it
:wherever a customer has let me. Deleting, well 3rd party
:utilities from another
:poster, I've heard about too. Never really looked into it
:seriously. I was too
:chicken-stuff!
:
What about disallowing all
PROTECTED]
www.netmedic.net
-Original Message-
From: Paris Stone [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 04, 2003 13:59
To: stephen at unix dot za dot net; dave
Cc: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
Can't delete Administrator or Guest
In-Reply-To: [EMAIL PROTECTED]
Forgive my ignorance, but why is it so important to remove the default
shares? Would this not hinder your manage abilities for all your
desktops? For instance, the Domain Administers would no longer be able to
simply type \\computername\c$ to access the drive.
the built in administrator account.
Dave
_
Dave Kleiman
[EMAIL PROTECTED]
www.netmedic.net
-Original Message-
From: David Gillett [mailto:[EMAIL PROTECTED]
Sent: Monday, June 02, 2003 17:38
To: [EMAIL PROTECTED]
Subject: RE: About default sharing folders
: About default sharing folders in Windows
You can remove administrative shares on a workstation by setting this key:
HKLM\System\
CurrentControlSet\Services\LanmanServer\Parameters\AutoShareWks
(REG_DWORD) 0
This information comes from http://www.cisecurity.org/ If you install
their security
-Original Message-
From: David Gillett [mailto:[EMAIL PROTECTED]
Sent: Monday, June 02, 2003 17:38
To: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
I strongly suggest renaming the local Administrator and Guest account
to something that is not easily
_
Dave Kleiman
[EMAIL PROTECTED]
www.netmedic.net
-Original Message-
From: David Gillett [mailto:[EMAIL PROTECTED]
Sent: Monday, June 02, 2003 17:38
To: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
I strongly suggest
: Wednesday, 4 de June de 2003 6:24 AM
To: dave
Cc: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
how about deleting the admininistrator account (killing that sid)
recreating a new account, redoing the privileges for that account, and
adding the new username to the administrator
From: stephen at unix dot za dot net [EMAIL PROTECTED]
how about deleting the admininistrator account (killing that sid)
Unfortunately you can't do that.
Chris Berry
[EMAIL PROTECTED]
Systems Administrator
JM Associates
All I want is a few minutes alone with the source code for the universe and
PROTECTED]
www.netmedic.net
-Original Message-
From: Paris Stone [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 04, 2003 13:59
To: stephen at unix dot za dot net; dave
Cc: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
Can't delete Administrator or Guest. Rename
Subject: RE: About default sharing folders in Windows
SNIP
I believe there might be a way in the registry to remove the
administrative shares altogether, but whether there is or isn't you need
to make sure you have strong passwords for the administrator account and
you should assign a strong
: About default sharing folders in Windows
SNIP
I believe there might be a way in the registry to remove the
administrative shares altogether, but whether there is or isn't you need
to make sure you have strong passwords for the administrator account and
you should assign a strong password to the Guest
PROTECTED]
Sent: Sunday, June 01, 2003 8:19 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: About default sharing folders in Windows
SNIP
I believe there might be a way in the registry to remove the
administrative shares altogether, but whether there is or
isn't you need
It is best to disable the built in administrator account.
Dave
_
Dave Kleiman
[EMAIL PROTECTED]
www.netmedic.net
-Original Message-
From: David Gillett [mailto:[EMAIL PROTECTED]
Sent: Monday, June 02, 2003 17:38
To: [EMAIL PROTECTED]
Subject: RE: About default
You can remove administrative shares on a workstation by setting this key:
HKLM\System\
CurrentControlSet\Services\LanmanServer\Parameters\AutoShareWks
(REG_DWORD) 0
This information comes from http://www.cisecurity.org/ If you install
their security benchmarking tool, a .pdf file is
SNIP
I believe there might be a way in the registry to remove the
administrative shares altogether, but whether there is or isn't you need
to make sure you have strong passwords for the administrator account and
you should assign a strong password to the Guest account even if you
keep the account
I strongly suggest renaming the local Administrator and Guest account
to something that is not easily guessed at. In addition, you should
probably create dummy accounts named Administrator and Guest
that have no rights/no group memberships and are disabled. Monitor
the dummy accounts
i've heard that there are some default sharing folders in Windows
2000, XP like $C, $D, $ADMIN, $IPC. if i've just installed WINDOWS 2000
OS w/ default setting, how hacker can access my sharing folders and what
hacker can do?
The main problem lies in using weak or no password.
These are
sken if i've just installed WINDOWS 2000 OS w/ default setting, how hacker can
sken access my sharing folders and what hacker can do?
If you have no firewalls and NetBIOS was not blocked otherwise,
I belive a hacker may use command like this one to map your drive C:
as a local M:
net use M:
20 matches
Mail list logo
