Announcement

Collapse
No announcement yet.

Enumeration of Sam accounts

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Enumeration of Sam accounts

    there is a choice in security options of GPO(or local settings) with an alternative Enable or Disable which tells
    "Do not Allow enumeration of Sam Accounts" What does it mean?

  • #2
    Re: Enumeration of Sam accounts

    Do you mean Do not Allow Anonymous enumeration of Sam Accounts?

    A quick google brought:

    http://www.microsoft.com/technet/pro...ec1aa2a7b.mspx

    and

    http://www.windowsitpro.com/Article/...4413.html?Ad=1

    Hope these help
    Server 2000 MCP
    Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

    Comment


    • #3
      Re: Enumeration of Sam accounts

      This means that Null sessions (unauthenticated sessions) are allowed to enumerate the accounts.
      If I remember it right, this is required for backward compatibility with 9X and NT clients. If all your clients are 2000 and up, you can safely disable it.

      More info on various security settings can be found here
      Guy Teverovsky
      "Smith & Wesson - the original point and click interface"

      Comment

      Working...
      X