Re: Access Sharing folder

[The Security Community <thesecuritycommunity () gmail com>]

Nothing prevents a determined idiot (with local admin access) from
re-sharing them and giving the local "Guest" account a blank password.

Of course, Domain-wide Group Policies (and regular auditing) should be
in place to prevent that sort of thing, but they usually aren't.

I can't count how many times I've seen developers and vendors re-share
"C$" as "C" for their own benefit.  The (very few) smart ones remember
to rewrite the file & folder ACLs when they're granted local admin
access (which should never happen without someone breathing down their
neck).

On 7/13/09, Leonardo Cavallari Militelli <leonardocavallari () gmail com> wrote:
> Hi,
> Those are admin shares and you won´t be able to access it with
> anonymous connection.
>
>
> 2009/7/13, Vinicius Menezes <cotomax () yahoo com>:
> > Hello,
> >
> > Anyone knows how to access C$ or D$, in local network with Active
> > Directory.
> > Without permission.
> >
> > Thanks
> >
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL
> > certificate.  We look at how SSL works, how it benefits your company and
> > how
> > your customers can tell if a site is secure. You will find out how to
> > test,
> > purchase, install and use a thawte Digital Certificate on your Apache web
> > server. Throughout, best practices for set-up are highlighted to help you
> > ensure efficient ongoing management of your encryption keys and digital
> > certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
>
> --
> Enviado do meu celular
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------