Plugin 25167 appears to be producing false-positives. This plugin is in the "Windows : Microsoft Bulletins" family and tests for MS07-028 (flaw in CAPICOM). The scan was run against a freshly-installed, fully-patched Windows 2003 R2 server with Citrix Presentation Server 4.5 installed. Here are the usual answers to the usual questions:
* Windows credentials (user name, password domain) are provided in the nessus config file * The Windows user account is in the Domain Admins group in the same domain as the server * The Windows account is not locked out * All other local checks are working (registry reads, service enumeration, account enumeration, etc.) R/ John Scherff
_______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
