Restrict Anonymous access

TheMSsForum.com: The Microsoft Software Forum

Recently we have done a security Audit,

As per their recommendation we need to change RestricAnonymous Registry
settings to
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA set to 1,
to prevent access to systems null credentials

Currently it is
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA set to 0

What will be the impact if we changed to 1, any application will have
issues ?(IIS,Exchnage,OWA,etc...),

Please help......
Top

Re: Restrict Anonymous access by Steve

Steve
Sun Nov 05 14:08:17 CST 2006

This is a multi-part message in MIME format.

------=_NextPart_000_001B_01C700D3.1423F9F0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Lots of information in the KB.

http://search.support.microsoft.com/search/default.aspx?query=3Drestricta=
nonymous

______________________________________________________
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com


"Shijo Michael" <shijo.michael@dubaiholding.com> wrote in message =
news:CAFDB141-EA44-4138-96B9-114B6B257D74@microsoft.com...
Recently we have done a security Audit,

As per their recommendation we need to change RestricAnonymous =
Registry=20
settings to=20
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA set to 1,
to prevent access to systems null credentials

Currently it is
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA set to 0

What will be the impact if we changed to 1, any application will have =

issues ?(IIS,Exchnage,OWA,etc...),

Please help......
------=_NextPart_000_001B_01C700D3.1423F9F0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1252">
<STYLE></STYLE>

<META content=3D"MSHTML 6.00.5750.0" name=3DGENERATOR></HEAD>
<BODY id=3DMailContainerBody=20
style=3D"PADDING-RIGHT: 10px; PADDING-LEFT: 10px; FONT-SIZE: 12pt; =
COLOR: #000000; PADDING-TOP: 15px; FONT-FAMILY: Cambria"=20
bgColor=3D#ffffff leftMargin=3D0 topMargin=3D0 CanvasTabStop=3D"true" =
acc_role=3D"text"=20
name=3D"Compose message area">
<DIV>Lots of information in the KB.</DIV>
<DIV>&nbsp;</DIV>
<DIV><A=20
title=3Dhttp://search.support.microsoft.com/search/default.aspx?query=3Dr=
estrictanonymous=20
href=3D"http://search.support.microsoft.com/search/default.aspx?query=3Dr=
estrictanonymous">http://search.support.microsoft.com/search/default.aspx=
?query=3Drestrictanonymous</A></DIV>
<DIV><BR>______________________________________________________<BR>Steve =

Riley<BR><A title=3Dmailto:steve.riley@microsoft.com=20
href=3D"mailto:steve.riley@microsoft.com">steve.riley@microsoft.com</A><B=
R><A=20
title=3Dhttp://blogs.technet.com/steriley=20
href=3D"http://blogs.technet.com/steriley">http://blogs.technet.com/steri=
ley</A><BR><A=20
title=3Dhttp://www.protectyourwindowsnetwork.com/=20
href=3D"http://www.protectyourwindowsnetwork.com">http://www.protectyourw=
indowsnetwork.com</A></DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Shijo Michael" &lt;<A =
title=3Dmailto:shijo.michael@dubaiholding.com=20
=
href=3D"mailto:shijo.michael@dubaiholding.com">shijo.michael@dubaiholding=
.com</A>&gt;=20
wrote in message <A=20
title=3Dnews:CAFDB141-EA44-4138-96B9-114B6B257D74@microsoft.com=20
=
href=3D"news:CAFDB141-EA44-4138-96B9-114B6B257D74@microsoft.com">news:CAF=
DB141-EA44-4138-96B9-114B6B257D74@microsoft.com</A>...</DIV>Recently=20
we have done a security Audit,<BR><BR>As per their recommendation we =
need to=20
change RestricAnonymous Registry <BR>settings to=20
=
<BR>HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA&nbsp;&nbsp; =
set to=20
1,<BR>to prevent access to systems null credentials<BR><BR>Currently =
it=20
=
is<BR>HKEY_LOCAL_MACHINE\system\currentcontrolset\control\LSA&nbsp;&nbsp;=
set=20
to 0<BR><BR>What will be the impact if we changed to 1,&nbsp; any =
application=20
will have <BR>issues ?(IIS,Exchnage,OWA,etc...),<BR><BR>Please=20
help......</BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_001B_01C700D3.1423F9F0--

Top