Re: Null Sessions - Restrict Anonymous

From: al (news@thispartisfake-13c.com)
Date: 12/08/02 

From: "al" <news@thispartisfake-13c.com>
Date: Sun, 8 Dec 2002 12:38:41 -0800

I went to securityfriday.com and downloaded getacct123 and tested it on a
windows 2000 domain controler with no firewall and the Local policy to
restrict enumeration of shares and users set. I got access denied and got no
information at all.

I am not to keen on downloading freeware from newsgroup links. Did You test
it [x y] ? or did you just read their statements and make me the sucker?

al.NET

"x y" <levinson_k@excite.com> wrote in message
news:OujBN2WnCHA.1616@TK2MSFTNGP12...
> Well, test it for yourself using the securityfriday.com URL below. They
> [and other sites] sure seem to think that setting isn't secure.
>
> "al" <news@thispartisfake-13c.com> wrote in message
> news:u0A6$rWnCHA.2392@TK2MSFTNGP12...
> > I hope you are wrong Karl, I set my RestrictAnonymous = 1 and I have
> stopped
> > seeing event logs with hackers using real user names. Maybe I need the
> veil
> > lifted so I will be watching this thread.
> >
> > al.NET
>
>
>
>