Re: TSGRINDER / Windows Terminal Services

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Sriram Sampath [MSFT] (sriramsa_at_online.microsoft.com)
Date: 02/20/04 

Date: Thu, 19 Feb 2004 20:21:57 -0800

TS *does not* allow user accounts with blank passwords to logon from remote.
If you have secure and strong passwords for remote users, you won't have a
problem with dictionary attack tools like TSGrinder.

Thanks,
-Sriram 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
TS FAQ:
http://www.microsoft.com/windows2000/community/centers/terminal/terminal_faq.asp
TS Licensing Chat, Nov. 5th:
http://www.microsoft.com/technet/itcommunity/chats/default.asp
"Mauricio Fernandez MCSE, CCNA" <SekureSupport@aol.com> wrote in message
news:90ebab91.0402151804.74a0745b@posting.google.com...
> Greetings Everyone,  I manage a Terminal Services/Citrix farm and I'm
> trying to figure out how vulnerable my WTS machines are from Local
> attacks.
>
> Has anyone ever used TSGRINDER or a similar TS Brute force attack and
> successfully gained access to the machine?

Relevant Pages

  • Re: Domain password change policy
    ... W2003 allows you to change multiple user accounts as you need to in bulk, ... Keep in mind that when you enable the change, any passwords already older ... I would also suggest enabling audting of account logon ... You can then view the security log in Event Viewer ...
    (microsoft.public.win2000.group_policy)
  • Re: Domain password change policy
    ... >logon until they change there passwords, ... >events for Domain Controller Security Policy and auditing ... >> deselect these settings on all the user accounts without ...
    (microsoft.public.win2000.group_policy)
  • Re: password problem
    ... of my machines with a password, Windows Logon, or user accounts. ... One of my friends has a small office with five machines and they ... all had multiple passwords and user accounts. ...
    (microsoft.public.windowsxp.basics)
  • Re: User Account Management and System Upgrades
    ... There's a table where I store all the user names. ... FileMaker's own user accounts. ... You can store "initial" passwords in a table with the user name, ... up the scripts to create or enable user accounts from those, or to reset ...
    (comp.databases.filemaker)
  • Re: Vista pc cannot access vista laptop on wireless LAN and vice versa
    ... Create matching user accounts and passwords on all machines. ... File Sharing (Folder Options>View tab). ...
    (microsoft.public.windows.vista.networking_sharing)