Security Problem with Anonymous Access

[swoodsmcse]

I have a problem that i would like to get help on. I have been contacted by a person who says that he was able to gain access anonymously to my user accounts on a Win2K server. He has emailed me the list and it shows the user logon name, whether or not it has a password, and whether or not a password is required. He says he is able to get all of this information over the internet without authenticating. Does anyone know how he is doing this and more importantly how can i prevent this from happening. Thanks

 

[dankelt]

He was able to do this because you have netbios open. There is a nifty litte program that will get all this info for you called NetBioSysIIb.

http://info-x.co.uk/default.asp?page=http://info-x.co.uk/downloads.stm

There are a few ways you can stop this. My recommendation is to get some kind of firewall.

 

[dankelt]

If you just want to fix this problem, you can set a security policy that will dissable the ability to establish a null shession. Just do the following:
Under, Local Policies --> Security Options

Select "Additional restrictions of anonymous connections" in the Policy pane on the right

From the pull down menu labeled "Local policy setting", select
"No access without explicit anonymous permissions"

 

[koquito]

yes, a firewall is a most nowadays A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!