Re: Problem Disabling "Null Session" on W2K3

[warl0ck () metaeye org]

Do this 

1. Go to Administrative Tools --> Local Security 
Policy --> Local Policies --> Security Options. 
Make sure the following two policies are enabled:

a. Network Access: Do not allow anonymous enumeration of SAM accounts: Enabled (Default)

b.Network Access: Do not allow anonymous enumeration of SAM accounts and shares: Enabled

Or this can also be accomplished using the following registry keys:

HKLM\System\CurrentControlSet\Control\Lsa\RestrictAnonymous=1 (This disallows enumeration of shares)
    HKLM\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM=1 (Default, not allowing enumeration of user 
accounts)

and then Reboot to make the changes take effect.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------