RE: XP Home
- From: "Deus, Attonbitus" <Thor@xxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 10 Feb 2003 13:24:51 -0800
At 12:34 PM 2/10/2003, you wrote:
http://www.ISAserver.org
> "Everyone" does not mean "anyone." It means "everyone with a valid
account
> on this controller." Giving "everyone" access does not allow anonymous
> access, or any access without a valid account.
Sorry, but that is wrong.
"Everyone" group includes "Anonymous" with no account.
Just to be specific, one cannot access files via a share with the null
user, and XP by default also limits the enumeration techniques one can use
with a null session. The point is that giving a file permissions for the
everyone built in group will not allow *anyone* to just hop on and get
files. It simply does not work that way. Just because it is set up for
"everyone" you still must authenticate to the controller.
T
Other related posts:
