Protection from null sessions

Networking/Security Forums -> Windows

Author: dissolved PostPosted: Wed Feb 09, 2005 3:58 pm    Post subject: Protection from null sessions
    ----
Does turning off file and print sharing protect me from null sessions, or do I need to do the change in Local Policy (Do not allow without explicit permissions etc)
thanks

Author: larsmhansenLocation: Boston, MA, USA PostPosted: Wed Feb 09, 2005 5:32 pm    Post subject:
    ----
Do the change in the Local Policy Editor.

Author: chalkspray PostPosted: Wed Feb 09, 2005 7:24 pm    Post subject:
    ----
The policy change would allow you to continue share files on the computer, but if file sharing is unchecked/removed from the network connection, netbios will still run but no file sharing can take place, thus no null sessions can take place.

Author: dissolved PostPosted: Wed Feb 09, 2005 7:28 pm    Post subject:
    ----
thanks guys

Author: Rowdy Yates PostPosted: Wed Feb 09, 2005 9:38 pm    Post subject:
    ----
http://rusecure.rutgers.edu/add_sec_meas/nullssn.php

RY

Author: Sgt_BLocation: Chicago, IL US PostPosted: Thu Feb 10, 2005 2:10 am    Post subject:
    ----
From regedit....

HLKM\SYSTEM\CurrentControlSet\Control\Lsa

There's an entry there called "restrictanonymous". It has three settings.
0 = allows anonymous access (null sessions)
1 = restricts info a user is able to get via null sessions but still allows them
2 = disables anonymous access. No more null sessions.
That's on win2k anyway. Works on NT too. XP might be stupid.



Networking/Security Forums -> Windows


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group