imho it is iresponsible default behaivor for a workstation OS to allow remote resources / services / enumeration before any interactive user or administrative login.
That's what services do. If you don't want it to do that, run it as a regular app. What do you suggest they do with the login service?
BB
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
