RE: Restrict Anonymous

From: Laura A. Robinson (laurarobinson_at_earthlink.net)
Date: 09/21/04

  • Next message: rohit_at_kritikalsolutions.com: "Re: Application sniffer" 
    To: "'Andrew Clelland'" <aclelland@rivermarkcu.org>, <focus-ms@securityfocus.com>
Date: Tue, 21 Sep 2004 17:10:18 -0400

    It sounds like this has been set in group policy, most likely on the Domain
    Controllers OU. In GP, go to Computer Settings -> Windows Settings ->
    Security Settings -> Local Policies -> Security Options -> Additional
    restrictions for anonymous connections (I'm working from memory here, so I
    might be off a bit) and choose the second option in the list, which should
    read something like "Do not allow enumeration of SAM accounts and shares".

    The reason that you're having problems with your XP clients only is because
    a setting of 2 for RA is no longer supported in XP or Win2k3. Instead, there
    are numerous other configuration options that allow you to achieve
    essentially the same result, but you need the XP/Win2K3 GP templates.

    Laura

    > -----Original Message-----
    > From: Andrew Clelland [mailto:aclelland@rivermarkcu.org]
    > Sent: Tuesday, September 21, 2004 12:03 PM
    > To: 'focus-ms@securityfocus.com'
    > Subject: Restrict Anonymous
    >
    > Good morning, I am curious about the Restrict Anonymous
    > setting in Windows 2000 Server. Our DC is Windows 2000 and we
    > have some servers with 2003 and half of our workstations are
    > Windows XP. Every evening the restrict anonymous key changes
    > to a DWORD value of 2 (allow users with explicit anonymous
    > permission) and denies users on Windows XP the chance to
    > change their expired password. Does anyone know of a way to
    > force this setting to a DWORD value of 1 (restrict anonymous
    > Users) or make Windows XP work with the DWORD value of 2?
    > Thanks in advance for your insight and I look forward to the
    > responses.
    >
    >
    > ~Andy
    >
    >
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > -------------
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: rohit_at_kritikalsolutions.com: "Re: Application sniffer"

    Relevant Pages

    • Re: Serious search problem
      ... "Robin Bignall" wrote: ... and ran all of the virus and malware checkers again. ... On the IE properties windows you will see these Taps: ... Click Privacy Tab and make sure your Privacy settings at least Medium High, ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: SunJavaScript/Flash/IE6 Not Working right! Help?
      ... I went to that site with my ZAPro settings as is - was able to view the ... I even tried lowering Internet Zone ... Using the Windows Firewall is, for me, not an option. ... The safe Mode test sort of implicates ZA. ...
      (microsoft.public.windows.inetexplorer.ie6.setup)
    • Windows Freezes at Logon after DL Windows updates
      ... the computer had shut me out starting windows ... I clicked my name Maureen Kennedy, and it would start to say it ... -2254 Service Pack 2 That screen shows administrator logon ... Userser name in my documents and settings - called ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Cant change home page, read others post
      ... I would do a clean install of Windows Xp and before ... "nass" wrote: ... I don't like the sound of *Reset web settings* not allowed, ... The entry in the registry did change to the new ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • RE: Serious search problem
      ... On the IE properties windows you will see these Taps: ... Click on General Tab, under Browsing Histroy Click Delete Button then Click ... Click Privacy Tab and make sure your Privacy settings at least Medium High, ... On the LAN Properties window Highlight Internet Protocol (TCP/IP) and click ...
      (microsoft.public.windowsxp.help_and_support)