Vulnerablility scan results and how to fix.

[Guest]

Their scan reported that the domain SID can be obtained remotely. An
attackter can use it to obtain the list of the local users of this host.

The solution they suggested : filter the ports 137 to 139 and 445

My question is how do I do this port filtering?

Thanks

 

[Mike Rosado [MSFT]]

Hi,

I'm by no means an expert in this subject matter Vulnerablility scan results
and/or Security Configuration, but the following articles should provide you
enough information to set up TCP/IP Port Filtering.

SECTION: "Recovery for Windows 2000 and Windows NT 4.0" of the following
article.
826955 Virus alert about the Blaster worm and its variants
http://support.microsoft.com/?id=826955

309798 How to configure TCP/IP filtering in Windows 2000
http://support.microsoft.com/?id=309798

--
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>

-----Original Message-----