Win2008 limit users remote anonymous access has a coup

In the win2008 system, the users of the Administrations group have high privileges. Whether it is a remote IPC connection or a terminal service login, as long as the administrator account is used without restrictions, this poses a certain threat to the system security. Prevent hackers from exploiting this vulnerability to connect, so it is necessary to limit anonymous access by remote users.

a, open the registry editor, navigate to HKEY_LOCAL_MACHINE \\ SYSTEM \\ CurrentControlSet \\ Control \\ LSA branches, the right to modify RestrictAnonymous shown in FIG. 1.

to about the RestrictAnonymous Explanation of three cases of values:

0 Depends on default permissions

1 Do not allow enumeration of SAM accounts and names

2 Cannot access without explicit anonymous permissions

Also remind you that you need to be aware of the domain controller DC. When the RestrictAnonymous registry value on a Windows 2000/2003/2008-based domain controller is set to 2, the following tasks are restricted:

The subordinate member workstation or server cannot establish a netlogon secure channel.

A subdomain controller in the trusting domain cannot establish a netlogon secure channel.

Microsoft Windows NT users cannot change their passwords after the password expires. In addition, Macintosh users cannot change their passwords at all.

The browser service cannot retrieve a list of domains or a list of servers from a backup browser, master browser, or domain master browser running on a computer with the RestrictAnonymous registry value set to 2. Therefore, all programs that rely on browser services do not work properly.

Due to the above results, it is recommended that you do not set the RestrictAnonymous registry value to 2 in a mixed mode environment that includes subordinate clients. You should consider setting the RestrictAnonymous registry value to 2 only in a Windows 2000/2003/2008 environment and only after sufficient quality assurance testing has been performed to verify that the appropriate service levels and program features continue to be maintained.

As a server-based system, the security of the system is very important, especially to prevent hackers. The win2008 system successfully limits the anonymous access of remote users, which is a very effective way to prevent hackers.