Need Help with hackers

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Mark (anonymous_at_discussions.microsoft.com)
Date: 05/26/04 

Date: Wed, 26 May 2004 08:31:15 -0700

I'm not sure which forum this should be placed since I see no Windows 2003 options. I have a windows 2000 domain which I just introduced a Windows 2003 server as a DC. I have “Additional restrictions for anonymous connections” set to “No access without explicit anonymous permissions”. Life was good before I introduced the 2003 DC. After I promoted the 2003 machine to a FSMO hackers downloading my user accounts and running scripts with different passwords to gain access to the machine. I’ve set a GPO from the 2003 server to enable:
Network Access: do not allow anonymous enumeration of SAM accounts
Network Access: do not allow anonymous enumeration of SAM accounts and Shares

How can I stop these guys from downloading the list of user accounts from the Windows 2003 DC?

Relevant Pages