OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Frank Heyne (fhRCS.URZ.TU-DRESDEN.DE)
Date: Fri Mar 23 2001 - 01:13:33 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 21 Mar 01, at 13:16, Geek, Security wrote:

    > Would someone please explain why I am able to connect

    You can never open a subkey directly.
    You always need to open the root key above it first.
    There are only 2 "real" root keys, which work remotely: HKLM and HKU.
    If you don't want a network user to open this root keys, you need to remove
    their rights from these keys, but be aware:
    - This will make not much sense, because they can't gain much with read
    access only to the root, and they might even have problems with access to
    network printers afterwards.
    - You need to replace read access for users with the pseudo group LOCAL,
    otherwise the local users and services wont't be able to use the machine.

    Greetings

    Frank Heyne