Windows Forum

Ask something
Discussion Locked

to save my Server from internal attacks

0 helpful
5 replies

by tellmewhy

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

HI, I just wanted to know if i could save my server from internal attacks? We have a hardware fairewall in our network so hacker attacks from outside is no problem. My files have been deleted by a user in my network. I have a member server NT4.0 where i handle all user accounts. I have "unshared" all my partitions from my system and hide my hostname from the network systems list but they still can search my system and then were able to enter and delete some of my files.

Please tell me some good security settings or software that may give me "Authentic Security" or near it atleast. PLease Helpppppppppp

5 replies

by deroode

Standard security in NT means everyone has full control over all files. Also the user Guest is member of everyone... Guest has no password. This is a standard leak in NT and Windows 2000.
The least you should do is disable the Guest account, and modify your filesystem security so that everyone has no rights (only logged in users)

HTH

by tellmewhy

It's more comlicated then this....the guest account is disabled. I already have filesecurity system enabled and all rights and permissions are properly configured. I need some advanced NT security features or a good third party security solution to my member server. thanx for helping.

by stevedunkley

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q320454&

Follow the link to get the MS Baseline Security Analyzer (MBSA).
Load it on a Win2k or better workstation and enter the server IP when prompted.
Do not load it on the server. It will not run on a NT 4 machine, however it will scan one.

Also check to see if your "firewall" is the real deal or just a NAT router. Check here.
http://www.icsalabs.com/html/communities/firewalls/certification/rxvendors/index.shtml

Afterwards check your external connection security at either http://www.symantec.com or http://www.grc.com.

Post again if your still having problems.
Later,
Steve

This discussion is closed to new replies.