[Gllug] Securing XP

[Bernard Peek]

In message <8547446c601b6dc980ee618ac683169b at actuality.co.uk>, Matthew 
Thompson <matt.thompson at actuality.co.uk> writes
>
>On 10 Apr 2005, at 18:17, Bruce Richardson wrote:
>
>> On Fri, Apr 08, 2005 at 11:28:51PM +0100, Bernard wrote:
>>>
>>> Nope. I added a Linux/Samba box to my Windows 2000 Server network. I 
>>>saw
>>> the C$ share on the domain controller and opened it just like any 
>>>other.
>>> This is a bit of a problem because that share is required for a number
>>> of purposes, it's pretty much impossible to work without it.
>>
>> If the contents of that share can be viewed from the network by J.
>> Random User, then that system is misconfigured.
>
>I believe that by default all shares with a $ appended to the name 
>become invisible as far as browsing is concerned - it should only be 
>full administrators that can access the share.

That could be it. IIRC the account I used for Samba was an 
administrator.

Yup! I can see the contents of C$ from Windows, when logged in as an 
administrator.


-- 
Bernard Peek
London, UK. DBA, Manager, Trainer & Author.

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug