OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brad Judy (judycolorado.edu)
Date: Thu Oct 11 2001 - 13:37:05 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Windows XP has a local security setting called "Network Access: Sharing and
    Security Model for Local accounts". By default it is set to force all
    connections to use the guest account, regardless of credentials. The guest
    account, by default, is disabled effectively preventing network access to
    the machine. Change this setting to the "Classic mode" to use the
    credentials presented for authorization to shares.

    Brad Judy
    Information Technology Services
    University of Colorado at Boulder

    > -----Original Message-----
    > From: Frank Heyne [mailto:fhrcs.urz.tu-dresden.de]
    > Sent: Thursday, October 11, 2001 10:31 AM
    > To: focus-mssecurityfocus.com
    > Subject: Windows XP - too much security?
    >
    >
    > Hello,
    >
    > There is a workgroup with a W2K and a Windows XP machine.
    > On both machines I have an admin account xxx with the same password.
    > As expected, I have no problems accessing the admin shares on W2K
    > from Win XP,
    > but vice versa all I get is an "access denied".
    >
    > Is this a new security feature in Win XP?
    > If so, why are there admin shares when they are not accessible on the
    > network?
    >
    >
    > Frank Heyne
    >
    >