Security Basics mailing list archives

Re: About default sharing folders in Windows


From: "Mark Kockerbeck" <temp2 () technosushi com>
Date: Mon, 2 Jun 2003 14:44:40 -0700

I don't know if this has been mentioned yet but below is a link that should
be of some help.
http://is-it-true.org/nt/atips/atips2.shtml

-Mark

----- Original Message -----
From: "Jimi Thompson" <jimit () myrealbox com>
To: <netsecurity.guide () about com>
Cc: <security-basics () securityfocus com>
Sent: Sunday, June 01, 2003 5:19 PM
Subject: RE: About default sharing folders in Windows


<SNIP>

I believe there might be a way in the registry to remove the
administrative shares altogether, but whether there is or isn't you need
to make sure you have strong passwords for the administrator account and
you should assign a strong password to the Guest account even if you
keep the account disabled.
</SNIP>

I strongly suggest renaming the local Administrator and Guest account
to something that is not easily guessed at.  In addition, you should
probably create "dummy" accounts named "Administrator" and "Guest"
that have no rights/no group memberships and are disabled.  Monitor
the dummy accounts closely for log in attempts.

If you machines are going to be exposed to the Internet, you will
have to hack the registry to remove the all the default shares.
Technet has several fine articles on this.
--
Thanks,

Ms. Jimi Thompson, CISSP, Rev.

"Those who are too smart to engage in politics are punished by being
governed by those who are dumber." --Plato




--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--






---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: