SeNSeMaNN
Jun 27 2004, 11:01 AM
hi
i deleted the ipc share on my system ,but is there still a way to login with the right user and password ?! crap like dameware always says network name not found, and if i try \\myserver\admin$ and enter right user and pwd it doesn´t work....
any solution ?!
mfg
Killaloop
Jun 28 2004, 08:04 AM
deleting IPC shares is not the result for the server not beeing aviable.
lanman service is disabled or ports are blocked.
deleting shares doesn't secure your computer since you can easily create new shares using dameware
Neo_
Jun 28 2004, 04:10 PM
w0bbes
Jun 28 2004, 04:44 PM
Disabling the ipc$ share makes sure that there cant be any more null sessions. i think:D
nuorder
Jun 28 2004, 04:57 PM
the ipc$ share uses named pipes so processes can communication with each other over the network. disabling it does stop many standard windows network tasks, like browing shares and services (even if authenticated) <- it is important!
null sessions can still be expoited if restrictanonymous is set to 1 so set it to 2
if you set it to 2 the admin$ share and root shares like c$ will be disabled
as a side note the sysinternals tool psexec wont work without the admin$ (restrictanonymous=1) share
im trying to understand your question. Do you want to be able to delete the ipc$ but still be able to login remotely with standard windows authentication, because you cant do both????
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.