|
Posted by =?Utf-8?B?R2hlYWxkYW4=?= on March 2, 2006, 11:28 am
If you were Registered and logged in, you could reply and use other advanced thread options
I have security settings in a domain wide group policy set to no allow
anonymous enumeration of user info, etc. But it is not working. Our security
department using Nessus can enumerate AD accounts, running services, etc on
all our Windows servers even though I have everything I can find disabled.
We run a Windows 2003 Domain with a mixed of 2000 and 2003 member servers.
Is this normal, to my knowledge you should have to authenticate to get the
info the security guys are finding from Nessus running on a BSB box.
|