Null Session on Windows 2003

[Nejoud]

How do I restrict and disable anonymous Null Session
connections on Windows 2003 servers ?

I've checked the registery keys on both Windows 2000 and
2003, which difers allot.

 

[Dale Weiss]

Hello,

Windows 2003 has more granular settings for this, for example disabling
NULL sessions and anonymous listing of accounts separately.

This is most easily configured in the Network Access area of the local
group policy (assuming that you are talking about a single machine). Start
GPEDIT.MSC and go to:

Computer Configuration/Windows Settings/Security Settings/Local
Policies/Security Options.

The meaning of each setting is described in Security Setting Descriptions
in the help file.


Dale Weiss MCSA MCSE CISSP
PSS Security

This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm