Re: About default sharing folders in Windows

FYI, you can delete the administrator account with a free third party utility. I forget its name off the top of my head, but it's discussed in Hacking Exposed Windows 2000.

Of course, I've never been brave enough to try it in a production environment.

Roger

*Roger A. Grimes, Computer Security Consultant
*CPA, MCSE (NT/2000), CNE (3/4), A+
*email: rogerg@cox.net
*cell: 757-615-3355
*Author of Malicious Mobile Code:  Virus Protection for Windows by O'Reilly
*http://www.oreilly.com/catalog/malmobcode
****************************************************************************
******

• Original Message ----- From: "Paris Stone" <paris@ciscoinstructor.com> To: "stephen at unix dot za dot net" <stephen@unix.za.net>; "dave" <dave@netmedic.net> Cc: <security-basics@securityfocus.com> Sent: Wednesday, June 04, 2003 1:59 PM Subject: RE: About default sharing folders in Windows

> Can't delete Administrator or Guest. Rename & Disable them, then create
dummy
> accounts with those two default names. All acl's are checked against the
SID's not
> the actual name and the SID's won't change with a rename. Therefore if
you can't
> delete it and renaming it won't remove the assignments, you're hosed.
There are
> tools out there that will scan your filesystem for rights, can't remember
any just
> now. Audit the system and manually remove rights.
ability
> >> to enumerate accounts over a null connection. The renamed
Administrator
> >> account will be trivial to spot by its ID otherwise.
> >>
> >> David Gillett
> >>
> >>
> >>
>
>> -------------------------------------------------------------------------

--

>

>> -------------------------------------------------------------------------

---

> >>

> >>

> >>

> >>

> >>

>

>> -------------------------------------------------------------------------

--

>

>> -------------------------------------------------------------------------

---

> >>

> >>

> >

> >

>

>---------------------------------------------------------------------------

>

>---------------------------------------------------------------------------

-

> >

>

> --

> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

> Paris Stone

> CISSP, CCNP, CNE, MCSE


least"

>

>

>

> --------------------------------------------------------------------------

-

> --------------------------------------------------------------------------

--

>



---------------------------------------------------------------------------
----------------------------------------------------------------------------