Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: Windows folder Sharing watch

Subject: RE: Windows folder Sharing watch
Date: Thu, 14 Dec 2006 16:33:25 -0000
"Rouge shares", quality!

I'm guessing that this was originally an advert that got stripped.

I have to ask though, why is this a problem? The default settings on all
recent versions of windows do not allow server shares to be created by
non-admins/server ops/power users/print ops/etc. Likewise for the desktop
OSs, are we still giving our users elevated rights?

Cheers

James D. Stallard


-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of phhowe@yahoo.com
Sent: 13 December 2006 03:55
To: focus-ms@securityfocus.com
Subject: Re: Windows folder Sharing watch

Are you worried that your Admins are creating rouge shares, or do you allow
your end-users to create server shares?

If you are allowing your end-users to create shares, you might want to
re-think that.

---------------------------------------------------------------------------
---------------------------------------------------------------------------





---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>