Whoops, one amendment- "Guest" (the built-in account, and only that one
guest account) is part of "Users", IIRC, but not "Authenticated Users".
Sorry about that. I haven't had my coffee today. :-) In any case, the URL I
gave might still be useful.
Laura
-----Original Message-----
From: Laura A. Robinson [mailto:larobins@bellatlantic.net]
Sent: Thursday, April 20, 2006 10:08 AM
To: 'Trevor'; 'focus-ms@securityfocus.com'
Subject: RE: Internet security on "hotspots"
Authenticated Users and Everyone are not the same, and the
difference between them has nothing to do with the Guest
account or Guests/Domain Guests groups. In Windows 2000 and
earlier, Everyone includes Anonymous Logon. In Win2K3, the
Anonymous Logon account was removed from the Everyone group.
Mixed-mode domains (Win2K) and Windows 2000 mixed functional
level domains (Win2K3) have nothing whatsoever to do with the
membership of the Everyone group. Mixed mode/FL relating to
groups is about whether or not you can create universal
security groups and fully utilize domain local groups. Last,
the built-in Guest account is part of both Authenticated
Users *and* Everyone.
An old post I wrote so I don't have to type the details up again:
http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-ms/
2003-01/0046.html
Laura
-----Original Message-----
From: Trevor [mailto:trevor@rottdog.com]
Sent: Wednesday, April 19, 2006 7:41 PM
To: focus-ms@securityfocus.com
Subject: RE: Internet security on "hotspots"
How about looking into using IPSec with a Pre-shared key (since the
home user likely does not have a Cert Authority or AD)?
That link does have a few misnomers. Using "Authenticated
Users" on
shares over Everyone is only necessary in a mix-mode domain.
Otherwise, AU and Everyone are the same (as 2000 removed Guest from
the Everyone group).
-Trevor
-----Original Message-----
From: ilaiy [mailto:ilaiy.e@gmail.com]
Sent: Wednesday, April 19, 2006 9:03 AM
To: nimda@retroweb.net
Cc: Agent Zr0; focus-ms@securityfocus.com
Subject: Re: Internet security on "hotspots"
Came across this checklist for home users which is pretty good ..
[url]
http://labmice.techtarget.com/articles/winxpsecuritychecklist.htm
[/url]
./thanks
ilaiy
--------------------------------------------------------------
----------
---
--------------------------------------------------------------
----------
---
--------------------------------------------------------------
-------------
--------------------------------------------------------------
-------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
