RE: Bypass Traverse Checking?

I thought I would weigh in on this discussion, mostly because I see some dangerous assertions being made.

A very good web article that clears the distinction between Everyone, Users, and Authenticated Users is at:

http://www.windowswebsolutions.com/Articles/Index.cfm?ArticleID=23581

I read it and agree with its findings.

Cheers,

--R

--
Randy Hall MCSA, MCSE (randy.hall@intel.com)
Network/Web Manager, Corporate Demos
Intel Corporation, Santa Clara, CA USA
All views expressed herein are MINE MINE MINE!!!
-----Original Message-----
From: Laura A. Robinson [mailto:larobins@bellatlantic.net] 
Sent: Friday, January 24, 2003 5:35 AM
To: 'Shane Brooks'; 'Williamson, Scott'; focus-ms@securityfocus.com
Subject: RE: Bypass Traverse Checking?

As an additional item, since I've been challenged on this one via
e-mail, I
would encourage reading of this:

http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?u
rl=/
windows2000/techinfo/reskit/en-us/distrib/dsbc_nar_lmxa.asp

or

http://tinyurl.com/4ubt

Particularly this:
"Note
For anonymous access to be available for Internet users, anonymous
access
must be enabled on the Internet Information Services (IIS) Web server."

Again, note that Authenticated users does _not_ include anonymous.

Laura



> -----Original Message-----