Re: UF_PASSWD_NOTREQD user account flag
From: Matt (smp.repicky_at_gmail.com)
Date: 03/16/05
- Previous message: Marc Fossi: "SecurityFocus Microsoft Newsletter #232"
- In reply to: Petr Merta: "UF_PASSWD_NOTREQD user account flag"
- Next in thread: Brady McClenon: "RE: UF_PASSWD_NOTREQD user account flag"
- Reply: Brady McClenon: "RE: UF_PASSWD_NOTREQD user account flag"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 16 Mar 2005 15:52:30 -0500 To: Petr Merta <pmerta@lynguent.com>
Not saying i've done any lookup on the flag or anything, but i know of
a local security policy setting that exists that says that user
accounts without passwords can only have console logon (log on
locally). Doesn't explain why you can't access the machine without a
password via SM. I believe network logon is controlled through the
user rights assignment in the local security settings (or domain if
you're networked) on a per user basis that can be set to allow/deny
remote access to the machine to specific users. It also can be
controlled through network access in the security options tab. There
is one setting that is turned on by default with simple file sharing
that says all network access is performed as user guest.
Hope that gives you some hints.
-- On Wed, 16 Mar 2005 00:23:36 +0100, Petr Merta <pmerta@lynguent.com> wrote: > Hi all, > > can anybody here explain the real meaning of UF_PASSWD_NOTREQD flag of Windows > user account? I've found bunch of user accounts in W2K domain with this flag > set; when I've tried to perform interactive or network logon with them, it > failed. I've found no descriptive documentation besides of vague "password > not required" statement. My questions are: > -- what's the actual meaning of this flag? > -- are there some circumstances under which it is possible to logon to account > with this flag set (without password)? > > Thanks for any info and/or reference. > > Petr > > --------------------------------------------------------------------------- > --------------------------------------------------------------------------- > > --------------------------------------------------------------------------- ---------------------------------------------------------------------------
- Previous message: Marc Fossi: "SecurityFocus Microsoft Newsletter #232"
- In reply to: Petr Merta: "UF_PASSWD_NOTREQD user account flag"
- Next in thread: Brady McClenon: "RE: UF_PASSWD_NOTREQD user account flag"
- Reply: Brady McClenon: "RE: UF_PASSWD_NOTREQD user account flag"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|