How can I restrict access to objects from Anonymous accounts?

John Savill

December 21, 1999

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. It is possible to restrict the ability to list domain user namesand enumerate share names available to anonymous logon users (also known asNULL session connections). If you feel this is a security risk Service Pack 3for Windows NT 4.0 introduces a new option to stop anonymous users listingusers and shares.

To enable this perform the following:

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa

  3. From the Edit menu select New - DWORD value and enter a name ofRestrictAnonymous if it does not already exist

  4. Double click the value and set to 1. Click OK

  5. Reboot the computer

After performing this change you should update your Emergency Repair Diskusing RDISK.EXE.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like