I'm looking for a solution to keep honest people honest.. I will be
monitoring the network for Everyone shares. If I find any, I will know that
it was intentional to circumvent the Group Policy. That way I don't have to
deal with "I didn't know any better".. I'm not looking for a DoD
implementation.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Matt Wagenknecht, CISSP
Security Administrator
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Never be afraid to try something new.
Remember, amateurs built the ark; professionals built the Titanic.

This email may contain confidential and privileged information for the sole
use of the intended recipient. Any review or distribution by others is
strictly prohibited. If you are not the intended recipient, please contact
the sender and delete all copies of this email message.

-----Original Message-----
From: Enrico Pastrello [mailto:epastrello (at) altevie (dot) com [email concealed]]
Sent: Tuesday, September 09, 2003 9:40 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: RE: Disabling sharing and group policies

Maybe I'm saying something quite stupid but since group policies are saved
in the registry, machine administrators can easilly bypass them..

Greetings,
Enrico Pastrello

-----Original Message-----
From: Matthew Wagenknecht [mailto:Matthew.Wagenknecht (at) quantum (dot) com [email concealed]]
Sent: lunedì 8 settembre 2003 18.49
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Disabling sharing and group policies

Is there a way with Group Policies to disable sharing without pulling users
from the Administrator group or killing adminstrative shares? I'm looking
for a way to reduce "everyone" shares without flogging end users. Strangely,
that actually sounds fun.. ;c)

Please keep flames off the list.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Matt Wagenknecht, CISSP
Security Administrator
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Never be afraid to try something new.
Remember, amateurs built the ark; professionals built the Titanic.

This email may contain confidential and privileged information for the sole
use of the intended recipient. Any review or distribution by others is
strictly prohibited. If you are not the intended recipient, please contact
the sender and delete all copies of this email message.

------------------------------------------------------------------------
---
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security
Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security
Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
------------------------------------------------------------------------
---

[ reply ]