[THIN] Re: Citrix_NHWatch in NT 4.0 MF 1.8 environment?

  • From: "Chris Lynch" <lynch00@xxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 22 Nov 2002 11:43:17 -0800

=20
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I don't know of the value you are wanting to know about =
(Citrix_NHWatch), but the "restrictanonymous" key when set to 0 means =
that anyone can "query" the server/machine for shares, user accounts, =
etc without providing a username.  Basically the session would be a null =
session.  If you set the value to 2, that means that no one without =
providing user credentials can get that information, but are limited =
based on ACL's for what is being queried for.

If you want to know more about this, you can search Microsoft's Support =
site for restrictanonymous, or you can read more about it in the =
"Hacking Windows 2000 Exposed" in Chapter 4.  A really good book for any =
Windows admin who wants to know more about security.

Chris Lynch, MCSE CCNA CCA
Network Engineer
Axcent Solutions
clynch@xxxxxxxxxxxxxxxxxxx
(949) 338-1904=20

- -----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On =
Behalf Of jason.weems@xxxxxxxxxxxx
Sent: Friday, November 22, 2002 10:30 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Citrix_NHWatch in NT 4.0 MF 1.8 environment?



Sorry, meant to say does anyone else running NT 4.0 w/ MF 1.8 have this =
value=20
set?

Also, what about the registry key=20
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA value of=20
restrictanonymous set to 0?

Thanks,
Jason

- -----Original Message-----
From:   Weems, Jason=20
Sent:   Friday, November 22, 2002 12:24 PM
To:     thin
Cc:     Weems, Jason
Subject:        [THIN] Citrix_NHWatch in NT 4.0 MF 1.8 environment?


I am looking at the Citrix document CTX228358.  According to the =
document,=20
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanserver\Parame=
ters,=20
contains the NullSessionPipes value and has the Citrix_NHWatch listed as =
a=20
string."

I find the NullSessionPipes key on my Citrix servers, though I do not =
find=20
Citrix_NHWatch listed as a string.  Can anyone else running NT 4.0 w/ MF =
1.8=20
have this value set?


Thanks,

Jason Weems
Sr. Network Systems Engineer
Systems Engineering Group
Citigroup Real Estate Lending and Technology Group
314-275-1142
jason.weems@xxxxxxxxxxxx



***********************************************=20
This Weeks Sponsor: Wyse Technologies
Get a free whitepaper on how to secure
your corporate data from Wyse. Click Below.=20
http://thethin.net/wyse.cfm=20
***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


***********************************************=20
This Weeks Sponsor: Wyse Technologies
Get a free whitepaper on how to secure
your corporate data from Wyse. Click Below.=20
http://thethin.net/wyse.cfm=20
***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0 (Build 349) Beta
Comment: Public PGP key for Chris Lynch

iQA/AwUBPd6I1edk9GeQ3R5SEQLADgCfS9G3lAJ8H/m2giGRXDOI+C/ai/4AoI8h
XYasGejvhX4zvMliClNAFk6f
=3DsJIt
-----END PGP SIGNATURE-----


*********************************************** 
This Weeks Sponsor: Wyse Technologies
Get a free whitepaper on how to secure
your corporate data from Wyse. Click Below. 
http://thethin.net/wyse.cfm 
*********************************************** 
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: