Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Smith, Ricky D. (RICKY.D.SMITHsaic.com)
Date: Mon Jun 03 2002 - 12:51:12 CDT
There should be no problem removing the Guest user account from the Domain
User and Domain Guests groups.
The IUSR_MACHINE and IWAM_MACHINE accounts are used by/for IIS. If you have
disabled or are not using IIS, then removing them from those groups will not
MCSE+I, MCSE (W2K), GCWN
From: Perikles P. Mourikis [mailto:mourikisdreamtech.gr]
Sent: Monday, June 03, 2002 0721
Subject: SBS 2000 accounts security settings
I have noticed that Microsoft's product Small Business Server 2000 (SBS
2000) has the "Guest" template group being a member of Domain Guests ,
Guests and Domain Users.
Also ISR_MACHINE and IWAM_MACHINE are members of Domain Users and Guests.
Does anybody knows any known issues with removing the Domain Users
membership from these accounts?
Are there any known exploits of this configuration? (assuming the SBS 2000
is patched properly...)