How can I restrict access to objects from Anonymous accounts?
John Savill
December 21, 1999
1 Min Read
A. It is possible to restrict the ability to list domain user namesand enumerate share names available to anonymous logon users (also known asNULL session connections). If you feel this is a security risk Service Pack 3for Windows NT 4.0 introduces a new option to stop anonymous users listingusers and shares.
To enable this perform the following:
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa
From the Edit menu select New - DWORD value and enter a name ofRestrictAnonymous if it does not already exist
Double click the value and set to 1. Click OK
Reboot the computer
After performing this change you should update your Emergency Repair Diskusing RDISK.EXE.
About the Author
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
You May Also Like