No announcement yet.

Connecting Via Rdp (TS) To A User With "null" As Password.

  • Filter
  • Time
  • Show
Clear All
new posts

  • Connecting Via Rdp (TS) To A User With "null" As Password.

    I heard it was possible to connect to an account (fe Administrator) that has a blank/empty/"null"/<null> password via Terminal Services (RDP).
    If anyone knows how, I would really want to know how this is possible.
    Also I'd like to know (if it's true) how you can avoid this from happening.
    Any comment on this would be fine too

    Love to hear from y'all

    Grtz, DD

  • #2
    Re: Connecting Via Rdp (TS) To A User With &quot;null&quot; As Password.

    This security improvement is controlled by GP.
    By default the local group policy on XP and Windows 2003 prohibit connecting remotely for users with blank password.
    The policy name is: Limit local account use of blank passwords to console logon only. This policy is enabled by default and can be found in GP anther Computer configuration, Windows settings, Security, Local Policy, Security options.

    Csaba Papp
    MCSA+messaging, MCSE, CCNA
    Remember to give credit where credit is due and leave reputation points where appropriate


    • #3
      Re: Connecting Via Rdp (TS) To A User With &quot;null&quot; As Password.

      There seems to be a trick that you could use (remotely, without having access to the remote PC), which made connecting to a user with a BLANK/EMPTY password work.

      So that is, without changing settings via the desktop.

      I'd like to know if anyone knows anything about that.

      And thanks for you reply Csaba.

      PS: Got some more information from Microsoft website:
      It says there:
      It is possible for applications that use remote interactive logons to bypass this setting.

      But hoowwww ???
      Last edited by DirtyDude; 1st February 2006, 00:41.