Re: MS patch-scanner for Win-NT, 2K, IIS, SQL

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 08/16/01 

Message-ID: <01c401c125d5$abc65c50$0b00010a@lauradominion.com>
From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: "Adcock, Matt" <Matthew.Adcock@GSCCCA.ORG>, "'Stadler, Brian T'" <bstadler@ukans.edu>, <flynngn@jmu.edu>
Subject: Re: MS patch-scanner for Win-NT, 2K, IIS, SQL
Date: Wed, 15 Aug 2001 18:00:16 -0400

Actually, workstation logon restrictions, clusters and some applications
require NetBIOS, even in a pure Windows 2000 environment. You can disable
NetBIOS as long as you have none of these things.

Laura A. Robinson
Technical Instructor/Consultant
MCT, MCSE, CLI, PCLP
IntelliMark Pennsylvania Division
http://www.intellimark-it.com
lrobinson@intellimark-it.com
----- Original Message -----
From: "Adcock, Matt" <Matthew.Adcock@GSCCCA.ORG>
To: "'Stadler, Brian T'" <bstadler@ukans.edu>; <flynngn@jmu.edu>
Cc: <focus-ms@securityfocus.com>; <bugtraq@securityfocus.com>
Sent: Wednesday, August 15, 2001 3:51 PM
Subject: RE: MS patch-scanner for Win-NT, 2K, IIS, SQL

> You can't disable NetBIOS in an NT4 directory. Among **many** other
things,
> NetBIOS resolution is required for domain communications, including
logons.
> If you're running Active Directory, you can disable NetBIOS, since AD is
> dependent on DNS, not NetBIOS. I think you mean you hope we all disable
> NetBEUI, and I agree with you.
>
> -----Original Message-----
> From: Stadler, Brian T [mailto:bstadler@ukans.edu]
> Sent: Wednesday, August 15, 2001 12:35 PM
> To: 'Gary Flynn'; Thomas C. Greene
> Cc: focus-ms@securityfocus.com; bugtraq@securityfocus.com
> Subject: RE: MS patch-scanner for Win-NT, 2K, IIS, SQL
>
>
> No, NetBIOS has to be enabled for this to work. I hope all of you
disable
> NetBIOS.
>
>
> -----Original Message-----
> From: Gary Flynn [mailto:flynngn@jmu.edu]
> Sent: Wednesday, August 15, 2001 10:51 AM
> To: Thomas C. Greene
> Cc: focus-ms@securityfocus.com; bugtraq@securityfocus.com
> Subject: Re: MS patch-scanner for Win-NT, 2K, IIS, SQL
>
>
> "Thomas C. Greene" wrote:
> >
> > which will scan all NT and/or 2K machines in a network from a single
> > location
> >
> > information such as the files in each patch and their file versions
> > and checksums, registry keys that would be applied by the hotfix,
>
> Is it safe to assume that the scanning machine must have remote
> administrative access to the machines to be checked in order to
> check those files and registry settings?
>
> --
> Gary Flynn
> Security Engineer - Technical Services
> James Madison University
>
> Please R.U.N.S.A.F.E.
> http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml

Relevant Pages

  • Re: Alias cannot be seen by same machine
    ... Thanks for the reply but IIS is not installed on this machine? ... From the TEST1 box ... > This is because of the way IIS works and how it deals with NetBios names.. ... > on access token (your current logged on credentials) for your credentials. ...
    (microsoft.public.windows.server.dns)
  • RE: MS patch-scanner for Win-NT, 2K, IIS, SQL
    ... MS patch-scanner for Win-NT, 2K, IIS, SQL ... You can't disable NetBIOS in an NT4 directory. ... NetBIOS resolution is required for domain communications, ...
    (Focus-Microsoft)
  • Re: Deaktivieren von NetBIOS
    ... "Rainer Gras" schrieb im Newsbeitrag ... > logischerweise ein IIS - dann bekomme ich wenn ich "NetBIOS über TCP/IP ... Da IIS ein bestandteil von Windows ...
    (microsoft.public.de.inetserver.iis)
  • Re: MS patch-scanner for Win-NT, 2K, IIS, SQL
    ... MS patch-scanner for Win-NT, 2K, IIS, SQL ... so I don't see how NetBIOS is *required*. ...
    (Focus-Microsoft)
  • Re: Domain Name
    ... it would be difficult to get NetBIOS name from SQL ... You'd better replace "clientComputerName" with the clinet name ... You could launch it from SQL Server by xp_cmdshell ...
    (microsoft.public.sqlserver.programming)