RE: Funny Windows 2k3 Security "Feature"

["Robert J. Stull" <Stull_Robert_J () cat com>]

If you need something cheap and quick than I personally would just forget
about running windows all together. Grab a Linux distro you like and run
samba or ftp.

If that doesn't work for you use a liveCD or a floppy distro like this
instead:
http://www.serverelements.com/naslite.php

If you go with windows then the server will require that everyone that
accesses it, needs to have a local account.

Just keep in mind the security risks of running an open server like this.




R. James Stull
Network Administrator
Caterpillar, Lafayette Engine Center
Phone - 765.448.2356
Email - stullrj () cat com





                                                                           
             "Beauford, Jason"                                             
             <jbeauford@EightI                                             
             nOnePet.com>                                                  
                                                                        To 
             03/16/2006 10:38                                           To 
             AM                        <kevinlh () hotmail com>               
                                       <security-basics () securityfocus com> 
                                                                        cc 
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                   Subject 
                                       RE: Funny Windows 2k3 Security      
                                       "Feature"                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           



Caterpillar: Confidential Green                 Retain Until: 04/15/2006
                                                Retention Category:  G90 -
                                                General
                                                Matters/Administration


If all you want to do is share files, why pay for the WS03 license?
There are a plethora of setups to accommodate your needs.

Here's one:  Contribs SME Server, http://contribs.org/modules/news/

Nice and simple solution.

-JMB

             |  -----Original Message-----
             |  From: kevinlh () hotmail com [mailto:kevinlh () hotmail com]
             |  Sent: Wednesday, March 15, 2006 1:18 PM
             |  To: security-basics () securityfocus com
             |  Subject: Funny Windows 2k3 Security "Feature"
             |
             |  I have a mobile unit of servers that are basically
             |  file storage for wifi laptops. The people that use
             |  the systems want to push a button and have
             |  everything work. Don't want a domain, don't want
             |  passwords, just want a central file system that
             |  everyone can rwxd. So I fired up MMC and added
             |  Security Analysis and Configuration... and turned on
             |  anonymous access to shares, enabled blank passwords
             |  for non-console users, enabled guest, etc. I set
             |  guest password blank, and theoretically i should
             |  brose to \\unsecuredserver\sharename and not be
             |  prompted for a password right? WRONG! No matter what
             |  combination of Local Sec Policies I set, I am always
             |  promted for a password. I was sure there was a way
             |  around it, but none that I have found. I ALWAYS have
             |  to type guest, and apparently this is too difficult
             |  for some people. <shrug> Any ideas?
             |
             |  -----------------------------------------------------
             |  ----------------------
             |  EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE -
             |  ONLINE The Norwich University program offers
             |  unparalleled Infosec management education and the
             |  case study affords you unmatched consulting experience.
             |  Tailor your education to your own professional goals
             |  with degree customizations including Emergency
             |  Management, Business Continuity Planning, Computer
             |  Emergency Response Teams, and Digital Investigations.
             |
             |  http://www.msia.norwich.edu/secfocus
             |  -----------------------------------------------------
             |  ----------------------
             |
             |

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------