RE: Null Session Fix not working on Domain Controllers

From: Les Arrowman (LesArrowman_at_discussions.microsoft.com)
Date: 03/19/05 

Date: Fri, 18 Mar 2005 17:27:02 -0800

I think this is relevant link you're probably looking for:

How to Use the RestrictAnonymous Registry Value in Windows 2000
http://support.microsoft.com/default.aspx?kbid=246261

"Nevada_Paul" wrote:

> We have been setting the registry in
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA by setting
> RestrictAnonymous to 1 as a standard practice. This prevents usernames and
> shares from being enumerated on member servers but on domain controllers we
> are still able to enumerate just the usernames. Setting to 2 causes some
> applications to fail.
>
> Saw a link to an article in the knowledgebase but it leads to an "article no
> longer found".
>
> Suggestions?
>
> Thanks!

Relevant Pages