[northernsky]

Hmmm, securing against a weak password attack......Unless anybody starts brute forcing you, as long as you don't use a weak password (6 char. with numbers/letters usually works well enough) Most people only really go for the easy kills anyway.

[Krogoth]

let's think of a password with the combination of letters and numbers.
eg. t3st(4u&7ry.

i think this will be safe else you can use a firewall to block port 139.

[eXist]

If you don't need NetBIOS on, apart from using a GOOD password, you could chuck all this in a batfile and run it:

net share /delete C$ /y
net share /delete D$ /y
net share /delete E$ /y
net share /delete F$ /y
net share /delete IPC$ /y
net share /delete ADMIN$ /y
net stop "Remote Registry Service"
net stop "Computer Browser"
net stop "Server" >> server.txt
net stop "REMOTE PROCEDURE CALL"
net stop "REMOTE PROCEDURE CALL SERVICE"
net stop "Remote Access Connection Manager"
net stop "telnet"
net stop "messenger"
net stop "netbios"
net stop "Net Logon"
net stop "TCP/IP NetBIOS Helper Service"

[t_gillum]

Yeah you could just get rid of the admin hidden shares but the only thing is that once you restart they get shared agian. That creates sorta a hassle if you know what i mean

[Spookie]

Heres some information for you regarding passwords, you may find of assistance.

CISSP Security Management and Practices

My pref. is passwords that are 8 characters in length which contain Upper Case - Lower Case - Special Characters - and numbers.

[technoboy]

you could also disable auto share:

Quote

Set WshShell=CreateObject("Wscript.Shell")


WshShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\AutoShareWks","0","REG_DWORD"
wscript.echo "�����ɹ�"
set WshShell=nothing

[-8-]

Hi guys, here comes my 2 cents.

As well as using capital letters and numbers in yer password you could try using a non-standard ascii character (smething i read). Basically pick a number between 155 and 210 (rough guess on the numbers, but any number between that range will give you the non-standard character) hold down ALT key and type yer number in, try it in a word processor or notepad. This number and ALT will produce ONE character. simply insert this somewhere in yer password. So you get this "password(ALT-179)". Apparently i can't spell to save my life, but these charaters are said to beat most password cracking software (LC3).

I hope that was helpful, (can i have my two cents back now?)

:ph34r:

[hottzo]

i believe the above batch script should do the job, also @ the begining add "@echo off" so that there will be no output 4 selected action:D also u can add the string to run the batch script in registry... HKLM\Software\Microsoft\Windows\CurrVers\Run, and add the the path of ur batch script....hf