RE: About default sharing folders in Windows
Correct me if I'm wrong, but as I know, you can't delete the built in
accounts on W2k.
Thus, the best way to improve security is renaming those accounts and
creating dummy ones.
Guilherme
-----Original Message-----
From: stephen at unix dot za dot net [mailto:stephen@unix.za.net]
Sent: Wednesday, 4 de June de 2003 6:24 AM
To: dave
Cc: security-basics@securityfocus.com
Subject: RE: About default sharing folders in Windows
how about deleting the admininistrator account (killing that sid)
recreating a new account, redoing the privileges for that account, and
adding the new username to the administrator or appropriate group.
then 'hack the registry' :D
then you should be left with a box with no default shares,
administrator/guest default accounts are non-existant, and the new ones have
new SIDs.
that a possible solution?
oh yeh, this is my first post :D
stephen
--
Success On Hold
(www.soh.co.za)
stephen@unix.za.net
tel: (031) 207 4811
On Tue, 3 Jun 2003, dave wrote:
> It is best to "disable" the built in administrator account.
----------------------------------------------------------------------------
>
>
>
>
>
> ----------------------------------------------------------------------
> -----
>
----------------------------------------------------------------------------
>
>
---------------------------------------------------------------------------
----------------------------------------------------------------------------
---------------------------------------------------------------------------
----------------------------------------------------------------------------
Received on Wed Jun 4 17:38:41 2003
This archive was generated by hypermail 2.1.8
: Wed Aug 23 2006 - 14:04:41 EDT
|