Re: MS patch-scanner for Win-NT, 2K, IIS, SQL

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 08/16/01 

Message-ID: <01c401c125d5$abc65c50$0b00010a@lauradominion.com>
From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: "Ad***, Matt" <Matthew.Ad***@GSCCCA.ORG>, "'Stadler, Brian T'" <bstadler@ukans.edu>, <flynngn@jmu.edu>
Subject: Re: MS patch-scanner for Win-NT, 2K, IIS, SQL
Date: Wed, 15 Aug 2001 18:00:16 -0400

Actually, workstation logon restrictions, clusters and some applications
require NetBIOS, even in a pure Windows 2000 environment. You can disable
NetBIOS as long as you have none of these things.

Laura A. Robinson
Technical Instructor/Consultant
MCT, MCSE, CLI, PCLP
IntelliMark Pennsylvania Division
http://www.intellimark-it.com
lrobinson@intellimark-it.com
----- Original Message -----
From: "Ad***, Matt" <Matthew.Ad***@GSCCCA.ORG>
To: "'Stadler, Brian T'" <bstadler@ukans.edu>; <flynngn@jmu.edu>
Cc: <focus-ms@securityfocus.com>; <bugtraq@securityfocus.com>
Sent: Wednesday, August 15, 2001 3:51 PM
Subject: RE: MS patch-scanner for Win-NT, 2K, IIS, SQL

> You can't disable NetBIOS in an NT4 directory. Among **many** other
things,
> NetBIOS resolution is required for domain communications, including
logons.
> If you're running Active Directory, you can disable NetBIOS, since AD is
> dependent on DNS, not NetBIOS. I think you mean you hope we all disable
> NetBEUI, and I agree with you.
>
> -----Original Message-----
> From: Stadler, Brian T [mailto:bstadler@ukans.edu]
> Sent: Wednesday, August 15, 2001 12:35 PM
> To: 'Gary Flynn'; Thomas C. Greene
> Cc: focus-ms@securityfocus.com; bugtraq@securityfocus.com
> Subject: RE: MS patch-scanner for Win-NT, 2K, IIS, SQL
>
>
> No, NetBIOS has to be enabled for this to work. I hope all of you
disable
> NetBIOS.
>
>
> -----Original Message-----
> From: Gary Flynn [mailto:flynngn@jmu.edu]
> Sent: Wednesday, August 15, 2001 10:51 AM
> To: Thomas C. Greene
> Cc: focus-ms@securityfocus.com; bugtraq@securityfocus.com
> Subject: Re: MS patch-scanner for Win-NT, 2K, IIS, SQL
>
>
> "Thomas C. Greene" wrote:
> >
> > which will scan all NT and/or 2K machines in a network from a single
> > location
> >
> > information such as the files in each patch and their file versions
> > and checksums, registry keys that would be applied by the hotfix,
>
> Is it safe to assume that the scanning machine must have remote
> administrative access to the machines to be checked in order to
> check those files and registry settings?
>
> --
> Gary Flynn
> Security Engineer - Technical Services
> James Madison University
>
> Please R.U.N.S.A.F.E.
> http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml

Quantcast