TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
the recommendation does not work with local accounts like Guest or
Administrator, the recommendation for those accounts should differ. One
can disable Guest, rename it to something not Guest. Administrator can be
renamed and the description be blanked out, etc, etc.
Checks the NT LANMAN.. :)
/mark
At 07:12 AM 9/17/00 -0700, infosecurite wrote:
>TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
>[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
>----------------------------------------------------------------------------
>
>Hello,
>
>Using ISS v6.1, I've the following (see below) low
>level alert when I run a full check. My question is in
>fact how Internet scanner could check (what does it
>check, something like net user,???) that I've a local
>account (because it doesn't give me all my accounts,
>but just one in a local group).
>
>regards,
>steve.
>
>"
>Windows local user on workstation
>
>Risk Level: Low Check or Attack Name: Local User
>
>Platforms: Windows NT, Windows 2000
>Description: A local user account has been found on a
>non-domain controller. Some sites require that all
>user accounts on workstations and standalone servers
>be managed through the domain.
>
>Remedy: Remove the local user. To delete (permanently
>remove) a user account, follow the steps below
>appropriate for your platform.
>"
>
>
>__________________________________________________
>Do You Yahoo!?
>Yahoo! Mail - Free email you can access from anywhere!
>http://mail.yahoo.com/
