OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Jeremy Rodriguez (jrodriguezintellinet-tech.com)
Date: Tue Jan 22 2002 - 09:26:37 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    My administrative shares (C$,D$,ADMIN$,etc) are still showing.
    AutoShareServer is set to 0, I reboot and they still are getting created.

    Also, do you know where to change the Cached Logon Credentials?

    -----Original Message-----
    From: DE VILLIERS IAN [mailto:ian.devilliersbmw.co.za]
    Sent: Tuesday, January 22, 2002 10:04 AM
    To: 'Jeremy Rodriguez'
    Cc: 'focus-mssecurityfocus.com'
    Subject: RE: remote shutdown

    To change the value of Shutdown without logon, open regedit and find the
    value titled "ShutdownWithoutLogon". this is located in
    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon. Set the value
    to 0.

    As for the shares, try changing the same value, but use the
    "CurrentControlSet" key. You might want to play around with "AutoShareWks"
    as well.

    Hope it helps.

    Regards,

    Ian de Villiers