Re: W2K Guest Account and mitigation

From: Lord Shaolin (abuse_at_127.0.0.1)
Date: 10/28/03 

Date: Tue, 28 Oct 2003 11:23:26 -0000

"Doug Fox" <dfox168@hotmail.com> wrote in message
news:3f9d83fe_1@news1.prserv.net...
> If the guest account on a W2K member server must be enabled, what can one
do
> to migitate the risk? Any pointers are appreciated.
>
> Regards,
>
>

Sort out the local file permissions.

Remove all "everyone permissions"

And reapply permissions as needed.

And me sure the guest user doesn't have access to anything that is doesn't
explicitly require. 

-- 
                 -+ Shaolin +-
Geek Goodies: http://shop.security-forums.com
        Share Your Knowledge
.: http://www.security-forums.com :.

Relevant Pages

  • RE: Windows 2003 x64 print server problems
    ... NTFS permissions on the Spool folder. ... Enable the guest account on the computer that is hosting the shared ... On the client computer, log on as the user and add the printer. ... Please uncheck "Automatically detect and install my Plug and Play ...
    (microsoft.public.windows.server.general)
  • Re: Windows XP Pro security question
    ... I neglected to mention that I had already checked the guest account on each ... I don't understand, since SFS is being used, how can there be permission ... folders and the only entry that shows up is Everyone permissions. ... is there any way 'reset' the file system permissions back to the ...
    (microsoft.public.windowsxp.general)
  • Re: MMC Message....
    ... that you may not have sufficient permissions. ... Jim, I've used defrag right there for 18 months ... By the way, if your computer shares files and folders, using simple file ... shares requires use of the Guest account. ...
    (microsoft.public.windowsxp.basics)
  • Re: securing files in a public PC
    ... the OP has already selected an "internet cafe" ... >> In Windows 2000 the guest account does not have a permanent profile ... >> users/application data folder and subfolders. ... >> that have permissions for guests/guest/everyone user/groups. ...
    (microsoft.public.win2000.security)
  • Re: File and Print Sharing Problems
    ... > Thanks Ron! ... > That fix did get rid of the not enough server storage available error ... That means all sharing operates via the guest account, ... or with the share or NTFS permissions. ...
    (microsoft.public.windowsxp.network_web)